To learn more, visit the CrowdStrike documentation.

​
Parameters​

ParameterDescription
Action NameSpecify one of these actions:- add-hosts - This action assigns hosts to the host groups.
  • remove-hosts - This action removes hosts to the host groups. | | Action Parameters | A comma-separated list of the parameters for the prospective action.Use the value parameter in the json of parameter “filter” to specify the host IDs to add or remove.Example value: [{ “name”: “filter”,“value”: “(device_id:[‘e139xxxxxxxx5885’, ‘8393xxxxxxxx9650’,‘389axxxxxxxx5e80’])” }, { “name”: “name2”, “value”: “value2” }] | | Host Group IDs | A comma-separated list of host group IDs to perform the action on. Can be obtained via the List Host Groups action. |

​
Example Output​

{    "meta": {        "query_time": 1.92e-7,        "trace_id": "5b5f13b7-4bbf-4bbc-9273-827abe3ee465"    },    "errors": [],    "resources": [        {            "id": "8015xxxxxxxx105d",            "group_type": "static",            "name": "Test Group 45",            "description": "A demo group",            "assignment_rule": "device_id:[],hostname:[]",            "created_by": "api-client-id:2e6dxxxxxxxx4914",            "created_timestamp": "2019-02-01T05:39:53.560719802Z",            "modified_by": "api-client-id:2e6dxxxxxxxx4914",            "modified_timestamp": "2019-02-01T05:39:53.560719802Z"        }    ]}

​
Workflow Library Example​

Perform Host Group Action with Crowdstrike and Send Results Via Email

Preview this Workflow on desktop

Was this page helpful?

Perform Host ActionPerform Incident Action