Perform the specified action on the Host Groups specified in the request. After creating a static host group, you must manually assign hosts to the group. You can also remove hosts that no longer belong in the group.
External DocumentationTo learn more, visit the CrowdStrike documentation.

​
Parameters

ParameterDescription
Action NameSpecify one of these actions:

- add-hosts - This action assigns hosts to the host groups.

- remove-hosts - This action removes hosts to the host groups.
Action ParametersA comma-separated list of the parameters for the prospective action.
Use the value parameter in the json of parameter “filter” to specify the host IDs to add or remove.
Example value:
[{ "name": "filter","value": "(device_id:['e139xxxxxxxx5885', '8393xxxxxxxx9650','389axxxxxxxx5e80'])" }, { "name": "name2", "value": "value2" }]
Host Group IDsA comma-separated list of host group IDs to perform the action on. Can be obtained via the List Host Groups action.

​
Example Output

{
	"meta": {
		"query_time": 1.92e-7,
		"trace_id": "5b5f13b7-4bbf-4bbc-9273-827abe3ee465"
	},
	"errors": [],
	"resources": [
		{
			"id": "8015xxxxxxxx105d",
			"group_type": "static",
			"name": "Test Group 45",
			"description": "A demo group",
			"assignment_rule": "device_id:[],hostname:[]",
			"created_by": "api-client-id:2e6dxxxxxxxx4914",
			"created_timestamp": "2019-02-01T05:39:53.560719802Z",
			"modified_by": "api-client-id:2e6dxxxxxxxx4914",
			"modified_timestamp": "2019-02-01T05:39:53.560719802Z"
		}
	]
}

​
Workflow Library Example

Perform Host Group Action with Crowdstrike and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop