Parameter | Description |
---|---|
Code | The script to be run on the endpoint. |
Endpoint | The endpoint in which the script will be run. Select the endpoint’s hostname or manually type its ID. |
Incident ID | String representing the incident ID. When included in the request, the Isolate Endpoints action will appear in the Cortex XDR Incident View Timeline tab. |
Timeout | The timeout in seconds for this execution. |
{
"reply": {
"action_id": "<action ID>",
"endpoints_count": 21
}
}
Was this page helpful?