Find all report IDs matching the query with filter.

The following permission is required to run this action:

  • Scheduled-reports: Read.

External Documentation

To learn more, visit the CrowdStrike documentation.

​
Basic Parameters

ParameterDescription
FilterFQL query specifying the filter parameters. Filter term criteria: type, trigger_reference, recipients, user_uuid, cid, trigger_params.metadata. Filter range criteria: created_on, modified_on; use any common date format, such as ‘2010-05-15T14:55:21.892315096Z’.
QueryMatch query criteria, which includes all the filter string fields.
Return All PagesAutomatically fetch all resources, page by page.

​
Advanced Parameters

ParameterDescription
LimitNumber of ids to return.
OffsetStarting index of overall result set from which to return ids.
SortPossible order by fields: created_on, last_updated_on, last_execution_on, next_execution_on.

​
Example Output

{
	"meta": {
		"query_time": 2,
		"pagination": {
			"offset": 0,
			"limit": 128,
			"total": 1
		},
		"powered_by": "<string>",
		"trace_id": "<string>"
	},
	"resources": [],
	"errors": []
}

​
Workflow Library Example

List Scheduled Reports with Crowdstrike and Send Results Via Email

Preview this Workflow on desktop