List Devices

Search for hosts in your environment.

Basic Parameters​

Parameter	Description
Filter	Filter detections using a query in Falcon Query Language (FQL) An asterisk wildcard * includes all results. Common filter options include:status, device.deviceid, maxseverity.The full list of valid filter options is extensive. Review it in CrowdStrike’s documentation inside the Falcon console.

Advanced Parameters​

Parameter	Description
Limit	The maximum records to return. [1-5000]
Offset	The offset to start retrieving records from.
Sort	The property to sort by (e.g. status.desc or hostname.asc).

Example Output​

{    "meta": {        "query_time": 0.005809461,        "pagination": {            "offset": 2,            "limit": 100,            "total": 2        },        "powered_by": "device-api",        "trace_id": "00000000-000000-0000000-0000000"    },    "resources": [        "123456789123456789123456789123456789",        "123456789123456789123456789123456789"    ],    "errors": []}

Workflow Library Example​

Remove Crowdstrike Falcon Sensors Inactive in The Last 12 Hours

Preview this Workflow on desktop