List RTR Sessions

Get a list of session_ids.

Basic Parameters

Parameter	Description
Filter	Optional filter criteria in the form of an FQL query. For more information about FQL queries, see our FQL documentation in Falcon. “user_id” can accept a special value ‘@me’ which will restrict results to records with current user’s ID.

Advanced Parameters

Parameter	Description
Limit	Number of ids to return.
Offset	Starting index of overall result set from which to return ids.
Sort	Sort by spec. Ex: 'date_created|asc'.

Example Output

{
    "errors": [
        {
            "code": 0,
            "id": "string",
            "message": "string"
        }
    ],
    "meta": {
        "pagination": {
            "limit": 0,
            "offset": 0,
            "total": 0
        },
        "powered_by": "string",
        "query_time": 0,
        "trace_id": "string",
        "writes": {
            "resources_affected": 0
        }
    },
    "resources": [
        "string"
    ]
}

Workflow Library Example

List Rtr Sessions with Crowdstrike and Send Results Via Email

Preview this Workflow on desktop