Search FalconItTaskExecution - CrowdStrike/psfalcon GitHub Wiki

Search-FalconItTaskExecution

SYNOPSIS

Start a search job for Falcon for IT task execution results

DESCRIPTION

Requires 'IT Automation - Task Executions: Read'.

PARAMETERS

Name Type Description Min Max Allowed Pipeline PipelineByName
Filter String[] One or more Falcon Query Language expressions to limit results
GroupBy String[] One or more fields to group results
Start String Start time of search
End String End time of search
Id String Task execution identifier X X

SYNTAX

Search-FalconItTaskExecution [[-Filter] <String[]>] [[-GroupBy] <String[]>] [[-Start] <String>] [[-End] <String>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

POST /it-automation/entities/task-execution-results-search/v1

USAGE

Perform an asynchronous search for task execution results

Search-FalconItTaskExecution -GroupBy 'result.script_output' -Id <id> -Start '-90d'

2025-08-04: PSFalcon v2.2.9

⚠️ **GitHub.com Fallback** ⚠️