Get FalconStream - CrowdStrike/psfalcon GitHub Wiki
Retrieve event streams
Requires 'Event streams: Read'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| AppId | String | Connection label | |||||
| Format | String | Format for streaming events [default: json] |
jsonflatjson
|
Get-FalconStream [-AppId] <String> [[-Format] <String>] [-WhatIf] [-Confirm] [<CommonParameters>]GET /sensors/entities/datafeed/v2
Get-FalconStream -AppId psfalcon2023-04-25: PSFalcon v2.2.5
