Perform Host Group Action
Perform the specified action on the Host Groups specified in the request. After creating a static host group, you must manually assign hosts to the group. You can also remove hosts that no longer belong in the group.
External Documentation
To learn more, visit the CrowdStrike documentation.
Parameters
Parameter | Description |
---|---|
Action Name | Specify one of these actions: - add-hosts - This action assigns hosts to the host groups.- remove-hosts : This action removes hosts to the host groups. |
Action Parameters | A comma-separated list of the parameters for the prospective action. Use the value parameter in the json of parameter "filter" to specify the host IDs to add or remove. Example value: [{ "name": "filter","value": "(device_id:['e139xxxxxxxx5885', '8393xxxxxxxx9650','389axxxxxxxx5e80'])" }, { "name": "name2", "value": "value2" }] |
Host Group IDs | A comma-separated list of host group IDs to perform the action on. Can be obtained via the List Host Groups action. |
Example Output
{
"meta": {
"query_time": 1.92e-7,
"trace_id": "5b5f13b7-4bbf-4bbc-9273-827abe3ee465"
},
"errors": [],
"resources": [
{
"id": "8015xxxxxxxx105d",
"group_type": "static",
"name": "Test Group 45",
"description": "A demo group",
"assignment_rule": "device_id:[],hostname:[]",
"created_by": "api-client-id:2e6dxxxxxxxx4914",
"created_timestamp": "2019-02-01T05:39:53.560719802Z",
"modified_by": "api-client-id:2e6dxxxxxxxx4914",
"modified_timestamp": "2019-02-01T05:39:53.560719802Z"
}
]
}
Workflow Library Example
Perform Host Group Action with Crowdstrike and Send Results Via Email