List all available streams for your environment, including the data feed URLs and authorization token for each stream in the event session. The following permissions are required to run this action:
  • Event streams: Read.
External DocumentationTo learn more, visit the CrowdStrike documentation.

​
Parameters

ParameterDescription
App IDThe unique identifier of the application.

​
Example Output

{
	"resources": [
		{
			"dataFeedURL": "http://firehose.crowdstrike.com/sensors/entities/datafeed/v1/0?appId=my_app_id",
			"sessionToken": {
				"token": "ui/Papb4QuiW99Er...6E2jB7OjJAZ9fcuWaimU=",
				"expiration": "2019-07-17T16:40:16.166805518Z"
			},
			"refreshActiveSessionURL": "https://api.crowdstrike.com/sensors/entities/datafeed-actions/v1/0?appId=my_app_id&action_name=refresh_active_stream_session",
			"refreshActiveSessionInterval": 1800
		}
	],
	"meta": {
		"query_time": 0.007506181,
		"powered_by": "FalconHose",
		"trace_id": "09d04710-e519-4201-8ac3-8341643437b7"
	}
}

​
Workflow Library Example

List Available Streams with Crowdstrike and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop