List RTR Sessions
Get a list of session_ids.
Basic Parameters
Parameter | Description |
---|---|
Filter | Optional filter criteria in the form of an FQL query. For more information about FQL queries, see our FQL documentation in Falcon. “user_id” can accept a special value ‘@me’ which will restrict results to records with current user’s ID. |
Advanced Parameters
Parameter | Description |
---|---|
Limit | Number of ids to return. |
Offset | Starting index of overall result set from which to return ids. |
Sort | Sort by spec. Ex: 'date_created |
Example Output
{
"errors": [
{
"code": 0,
"id": "string",
"message": "string"
}
],
"meta": {
"pagination": {
"limit": 0,
"offset": 0,
"total": 0
},
"powered_by": "string",
"query_time": 0,
"trace_id": "string",
"writes": {
"resources_affected": 0
}
},
"resources": [
"string"
]
}
Workflow Library Example
List Rtr Sessions with Crowdstrike and Send Results Via Email