New FalconNgsCaseTemplate - CrowdStrike/psfalcon GitHub Wiki
Create a Falcon NGSIEM case template
Requires 'Case Templates: Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Name | String | Case template name | X | ||||
| Description | String | Case template description | X | ||||
| SlaId | String | SLA identifier | X | ||||
| Field | Object[] | Objects containing 'fields' properties ('data_type', 'input_type', 'multivalued', 'name', 'options', 'required') | X |
New-FalconNgsCaseTemplate [-Name] <String> [[-Description] <String>] [[-SlaId] <String>] [[-Field] <Object[]>] [-WhatIf] [-Confirm] [<CommonParameters>]POST /casemgmt/entities/templates/v1
New-FalconNgsCaseTemplate -Name 'Priority Template' -Description 'Template for priority cases' -SlaId <id> -Field @{ data_type = 'string'; input_type = 'dropdown'; multivalued = $true; name = 'Priority'; options = @(@{ value = 'High'}, @{ value = 'Low' }); required = $true }, @{ data_type = 'string'; input_type = 'textarea'; multivalued = $false; name = 'Description'; required = $true }2025-09-26: PSFalcon v2.2.9
