​
Example Output​

{  "reply":[    {      "agent_id":"<agent ID>",      "agent_status":"LOST",      "host_name":"EX2",      "agent_type":"Server",      "endpointTags":"<tag name>",      "ip":<IP address>,      "last_seen":1652875917846,      "tags":{        "server_tags":[          "connection_lost1",          "filtered1"        ],        "endpoint_tags":[          "register2"        ]      },      "users":"root"    },    {      "agent_id":"<agent ID>",      "agent_status":"CONNECTED",      "host_name":"<host name>",      "agent_type":"Workstation",      "endpointTags":"<tag name>",      "ip":<IP address>,      "last_seen":1648967781569,      "tags":{        "server_tags":[          "connection_lost1",          "filtered1"        ],        "endpoint_tags":[          "register2"        ]      },      "users":"root"    },    {      "agent_id":"<agent ID>",      "agent_status":"DISCONNECTED",      "host_name":"<host name>",      "agent_type":"Workstation",      "endpointTags":"<tag name>",      "ip":<IP address>,      "last_seen":1648997281089,      "tags":{        "server_tags":[        ],        "endpoint_tags":[        ]      },      "users":"root"    }  ]}

​
Workflow Library Example​

List Endpoints with Cortex Xdr and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?

Lift Endpoint IsolationRetrieve Files From Endpoint