This action has been deprecated and will no longer be available in new workflows.

Action is Deprecated. Use Get Devices By IDs instead.

To learn more, visit the CrowdStrike documentation.

​
Parameters​

ParameterDescription
Host IDsA comma separated list of host ids to get details of. Can be retrieved from the ‘List Hosts’ action.

​
Example Output​

{  "meta": {    "query_time": 0.017458709,    "powered_by": "device-api",    "trace_id": "7aea2f44-9891-4892-b633-bf0544830e55"  },  "resources": [    {      "device_id": "abcd1234wxyz56",      "cid": "0123456789ABCDEFGHIJKLMNOPQRSTUV",      "agent_load_flags": "1",      "agent_local_time": "2017-09-15T06:13:15.223Z",      "agent_version": "3.5.5606.0",      "bios_manufacturer": "Phoenix Technologies LTD",      "bios_version": "6.00",      "config_id_base": "65994753",      "config_id_build": "5606",      "config_id_platform": "3",      "external_ip": "24.16.20.181",      "mac_address": "00-50-56-8c-17-81",      "hostname": "example_host",      "first_seen": "2017-07-19T02:08:24Z",      "last_seen": "2017-09-25T23:45:55Z",      "local_ip": "192.0.2.100",      "machine_domain": "example.com",      "major_version": "6",      "minor_version": "1",      "os_version": "Windows 7",      "os_build": “19H1323",      "platform_id": "0",      "platform_name": "Windows",      "policies": [        {          "policy_type": "prevention",          "policy_id": "aaabbbdddcccddd",          "applied": true,          "settings_hash": "ed4a7460",          "assigned_date": "2017-09-14T13:03:33.038805882Z",          "applied_date": "2017-09-14T13:03:45.823683755Z"        }      ],      "device_policies": {        "prevention": {          "policy_type": "prevention",          "policy_id": "aaabbbdddcccddd",          "applied": true,          "settings_hash": "ed4a7460",          "assigned_date": "2017-09-14T13:03:33.038805882Z",          "applied_date": "2017-09-14T13:03:45.823683755Z"        },        "sensor_update": {          "policy_type": "sensor-update",          "policy_id": "aaabbbdddcccddd",          "applied": true,          "settings_hash": "65994753|3|2|automatic",          "assigned_date": "2017-09-14T05:15:40.878196578Z",          "applied_date": "2017-09-14T05:16:20.847887649Z"        }      },      "product_type": "1",      "product_type_desc": "Workstation",      "site_name": "Default-First-Site-Name",      "status": "normal",      "system_manufacturer": "VMware, Inc.",      "system_product_name": "VMware Virtual Platform",      "modified_timestamp": "2017-09-25T23:46:06Z",      "meta": {        "version": "49662"      },      "kernel_version": "6.1.7601.17592"    }  ],  "errors": []}

​
Workflow Library Example​

Get Host with Crowdstrike and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?

Get Devices By IDsGet Indicator Details