List Devices

Search for hosts in your environment.

Basic Parameters

Parameter	Description
Filter	Filter detections using a query in Falcon Query Language (FQL) An asterisk wildcard * includes all results. Common filter options include: status, device.device_id, max_severity. The full list of valid filter options is extensive. Review it in CrowdStrike's documentation inside the Falcon console.

Advanced Parameters

Parameter	Description
Limit	The maximum records to return. [1-5000]
Offset	The offset to start retrieving records from.
Sort	The property to sort by (e.g. status.desc or hostname.asc).

Example Output

{
    "meta": {
        "query_time": 0.005809461,
        "pagination": {
            "offset": 2,
            "limit": 100,
            "total": 2
        },
        "powered_by": "device-api",
        "trace_id": "00000000-000000-0000000-0000000"
    },
    "resources": [
        "123456789123456789123456789123456789",
        "123456789123456789123456789123456789"
    ],
    "errors": []
}

Workflow Library Example

Remove Crowdstrike Falcon Sensors Inactive in The Last 12 Hours

Preview this Workflow on desktop