Retrieve the results of a script execution action.
External DocumentationTo learn more, visit the Cortex XDR documentation.

​
Parameters

ParameterDescription
Action IDThe action ID of the selected request, which is returned when running the Execute Python Script action.
This can be also found in the Cortex XDR console Response > Action Center > Action ID field.

​
Example Output

{
	"reply": {
		"script_name": "snippet script",
		"script_description": "",
		"script_parameters": [],
		"date_created": "2020-03-29 13:21:59",
		"scope": "win_10and 21 other endpoints",
		"error_message": "",
		"results": [
			{
				"endpoint_name": "<name>",
				"endpoint_ip_address": [
					"<IP address>"
				],
				"endpoint_status": "LOST",
				"domain": "aaaa",
				"endpoint_id": "<endpoint ID>",
				"execution_status": "PENDING",
				"standard_output": null,
				"retrieved_files": 0,
				"failed_files": 0,
				"retention_date": null
			},
			{
				"endpoint_name": "<name>",
				"endpoint_ip_address": [
					"<IP address>"
				],
				"endpoint_status": "LOST",
				"domain": "<domain name>",
				"endpoint_id": "<endpoint ID>",
				"execution_status": "PENDING",
				"standard_output": null,
				"retrieved_files": 0,
				"failed_files": 0,
				"retention_date": null
			},
			{
				"endpoint_name": "<name>",
				"endpoint_ip_address": [
					"<IP address>"
				],
				"endpoint_status": "DISCONNECTED",
				"domain": "WORKGROUP",
				"endpoint_id": "<endpoint ID>",
				"execution_status": "PENDING",
				"standard_output": null,
				"retrieved_files": 0,
				"failed_files": 0,
				"retention_date": null
			}
		]
	}
}

​
Workflow Library Example

Get Script Execution Results with Cortex Xdr and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop