Remove FalconSensorTag - CrowdStrike/psfalcon GitHub Wiki
Use Real-time Response to remove SensorGroupingTags from a host
When provided, SensorGroupingTag values will be removed from list of existing tags and others will be left unmodified. If no tags are provided, all existing tags will be removed.
Requires 'Hosts: Read', 'Sensor update policies: Write', 'Real time response: Read', and 'Real time response (admin): Write'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Tag | String[] | SensorGroupingTag value ['SensorGroupingTags/'] | |||||
| QueueOffline | Boolean | Add command request to the offline queue | |||||
| Id | String[] | Host identifier | X | X |
Remove-FalconSensorTag [[-Tag] <String[]>] [[-QueueOffline] <Boolean>] [-Id] <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]Remove-FalconSensorTag uses Real-time Response to remove the tags from the target host(s).
Remove-FalconSensorTag -Id <id>, <id> -Tag tag1, tag2 [-QueueOffline]2024-09-03: PSFalcon v2.2.7
