New FalconNgsCaseTemplate - CrowdStrike/psfalcon GitHub Wiki
Create a Falcon NGSIEM case template
Requires 'Case Templates: Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Name | String | Case template name | X | ||||
| Description | String | Case template description | X | ||||
| SlaId | String | SLA identifier | X | ||||
| Field | Object[] | Objects containing 'fields' properties ('data_type', 'input_type', 'multivalued', 'name', 'options', 'required') | X |
New-FalconNgsCaseTemplate [-Name] <String> [[-Description] <String>] [[-SlaId] <String>] [[-Field] <Object[]>] [-WhatIf] [-Confirm] [<CommonParameters>]POST /casemgmt/entities/templates/v1
2025-08-25: PSFalcon v2.2.9
