Perform Host Group Action

Perform the specified action on the Host Groups specified in the request. After creating a static host group, you must manually assign hosts to the group. You can also remove hosts that no longer belong in the group.

External Documentation

To learn more, visit the CrowdStrike documentation.

Parameters

Parameter	Description
Action Name	Specify one of these actions: - add-hosts - This action assigns hosts to the host groups. - remove-hosts - This action removes hosts to the host groups.
Action Parameters	A comma-separated list of the parameters for the prospective action. Use the value parameter in the json of parameter "filter" to specify the host IDs to add or remove. Example value: [{ "name": "filter","value": "(device_id:['e139xxxxxxxx5885', '8393xxxxxxxx9650','389axxxxxxxx5e80'])" }, { "name": "name2", "value": "value2" }]
Host Group IDs	A comma-separated list of host group IDs to perform the action on. Can be obtained via the List Host Groups action.

Example Output

{
    "meta": {
        "query_time": 1.92e-7,
        "trace_id": "5b5f13b7-4bbf-4bbc-9273-827abe3ee465"
    },
    "errors": [],
    "resources": [
        {
            "id": "8015xxxxxxxx105d",
            "group_type": "static",
            "name": "Test Group 45",
            "description": "A demo group",
            "assignment_rule": "device_id:[],hostname:[]",
            "created_by": "api-client-id:2e6dxxxxxxxx4914",
            "created_timestamp": "2019-02-01T05:39:53.560719802Z",
            "modified_by": "api-client-id:2e6dxxxxxxxx4914",
            "modified_timestamp": "2019-02-01T05:39:53.560719802Z"
        }
    ]
}

Workflow Library Example

Perform Host Group Action with Crowdstrike and Send Results Via Email

Preview this Workflow on desktop