Operation ID Description
Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria.
Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policies which match the filter criteria.
Perform the specified action on the Content Update Policies specified in the request.
Sets the precedence of Content Update Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies when updating precedence.
Retrieve a set of Content Update Policies by specifying their IDs.
Create Content Update Policies by specifying details about the policy to create.
Delete a set of Content Update Policies by specifying their IDs.
Update Content Update Policies by specifying the ID of the policy and details to update.
Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria.
Search for content versions available for pinning given the category.
Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policy IDs which match the filter criteria.
Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria.
query_policy_members_combined
Method Route
/policy/combined/content-update-members/v1
Produces: application/json
Name Service Uber Type Data type Description
id query string The ID of the Content Update Policy to search for members of.
filter query string The filter expression that should be used to limit the results.
offset query integer The offset to start retrieving records from.
limit query integer The maximum records to return. [1-5000]
sort query string The property to sort by.
parameters query dictionary Full set of query string parameters in a JSON formatted dictionary.
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policy_members_combined(id="string" ,
filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryCombinedContentUpdatePolicyMembers(id="string" ,
filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryCombinedContentUpdatePolicyMembers" ,
id="string" ,
filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policies which match the filter criteria.
query_policies_combined
Method Route
/policy/combined/content-update/v1
Produces: application/json
Name Service Uber Type Data type Description
filter query string The filter expression that should be used to limit the results.
offset query integer The offset to start retrieving records from.
limit query integer The maximum records to return. [1-5000]
sort query string The property to sort by.
parameters query dictionary Full set of query string parameters in a JSON formatted dictionary.
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policies_combined(filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryCombinedContentUpdatePolicies(filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryCombinedContentUpdatePolicies" ,
filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
Perform the specified action on the Content Update Policies specified in the request.
perform_action
Method Route
/policy/entities/content-update-actions/v1
Produces: application/json
Name Service Uber Type Data type Description
action_name query string The action to perform. Allowed values:add-host-group
disable
enable
override-allow
override-pause
override-revert
remove-host-group
remove-pinned-content-version
set-pinned-content-version
action_parameters query dictionary or list of dictionaries Action specific parameter options.
body body dictionary Full body payload as JSON formatted dictionary.
ids body string or list of strings Content update policy IDs to perform action against.
parameters query dictionary Full set of query string parameters in a JSON formatted dictionary.
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
act_params = {
"name" : "string" ,
"value" : "string"
}
id_list = 'ID1,ID2,ID3'
response = falcon.perform_action(action_name="string" ,
action_parameters=act_params,
ids=id_list
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
act_params = {
"name" : "string" ,
"value" : "string"
}
id_list = 'ID1,ID2,ID3'
response = falcon.performContentUpdatePoliciesAction(action_name="string" ,
action_parameters=act_params,
ids=id_list
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"action_parameters" : [
{
"name" : "string" ,
"value" : "string"
}
],
"ids" : [
"string"
]
}
response = falcon.command("performContentUpdatePoliciesAction" ,
action_name="string" ,
body=body_payload
)
print(response)
Sets the precedence of Content Update Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies when updating precedence.
set_precedence
Method Route
/policy/entities/content-update-precedence/v1
Produces: application/json
Name Service Uber Type Data type Description
body body dictionary Full body payload as JSON formatted dictionary.
ids body string or list of strings ID list in precedence order.
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3'
response = falcon.set_precedence(ids=id_list)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3'
response = falcon.setContentUpdatePoliciesPrecedence(ids=id_list)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"ids" : [
"string"
]
}
response = falcon.command("setContentUpdatePoliciesPrecedence" , body=body_payload)
print(response)
Retrieve a set of Content Update Policies by specifying their IDs.
get_policies
Method Route
/policy/entities/content-update/v1
Produces: application/json
Name Service Uber Type Data type Description
ids query string or list of strings Content update policy IDs to return.
parameters query dictionary Full set of query string parameters in a JSON formatted dictionary.
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3'
response = falcon.get_policies(ids=id_list)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3'
response = falcon.getContentUpdatePolicies(ids=id_list)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3'
response = falcon.command("getContentUpdatePolicies" , ids=id_list)
print(response)
Create Content Update Policies by specifying details about the policy to create.
create_policies
Method Route
/policy/entities/content-update/v1
Produces: application/json
Name Service Uber Type Data type Description
body body dictionary Full body payload as JSON formatted dictionary.
description body string Content Update policy description.
name body string Content Update policy name.
settings body dictionary Content Update policy settings.
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings" : [
{
"delay_hours" : "string" ,
"id" : "string" ,
"ring_assignment" : "string"
}
]
}
response = falcon.create_policies(description="string" , name="string" , settings=policy_settings)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings" : [
{
"delay_hours" : "string" ,
"id" : "string" ,
"ring_assignment" : "string"
}
]
}
response = falcon.createContentUpdatePolicies(description="string" ,
name="string" ,
settings=policy_settings
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"resources" : [
{
"description" : "string" ,
"name" : "string" ,
"settings" : {
"ring_assignment_settings" : [
{
"delay_hours" : "string" ,
"id" : "string" ,
"ring_assignment" : "string"
}
]
}
}
]
}
response = falcon.command("createContentUpdatePolicies" , body=body_payload)
print(response)
Delete a set of Content Update Policies by specifying their IDs.
delete_policies
Method Route
/policy/entities/content-update/v1
Produces: application/json
Name Service Uber Type Data type Description
ids query string or list of strings Content update policy IDs to remove.
parameters query dictionary Full set of query string parameters in a JSON formatted dictionary.
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3'
response = falcon.delete_policies(ids=id_list)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3'
response = falcon.deleteContentUpdatePolicies(ids=id_list)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3'
response = falcon.command("deleteContentUpdatePolicies" , ids=id_list)
print(response)
Update Content Update Policies by specifying the ID of the policy and details to update.
update_policies
Method Route
/policy/entities/content-update/v1
Produces: application/json
Name Service Uber Type Data type Description
body body dictionary Full body payload as JSON formatted dictionary.
description body string Content Update policy description.
id body string Content Update policy ID to update.
name body string Content Update policy name.
settings body dictionary Content Update policy settings.
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings" : [
{
"delay_hours" : "string" ,
"id" : "string" ,
"ring_assignment" : "string"
}
]
}
response = falcon.update_policies(description="string" ,
id="string" ,
name="string" ,
settings=policy_settings
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings" : [
{
"delay_hours" : "string" ,
"id" : "string" ,
"ring_assignment" : "string"
}
]
}
response = falcon.updateContentUpdatePolicies(description="string" ,
id="string" ,
name="string" ,
settings=policy_settings
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"resources" : [
{
"description" : "string" ,
"id" : "string" ,
"name" : "string" ,
"settings" : {
"ring_assignment_settings" : [
{
"delay_hours" : "string" ,
"id" : "string" ,
"ring_assignment" : "string"
}
]
}
}
]
}
response = falcon.command("updateContentUpdatePolicies" , body=body_payload)
print(response)
Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria.
query_policy_members
Method Route
/policy/queries/content-update-members/v1
Produces: application/json
Name Service Uber Type Data type Description
id query string The ID of the Content Update Policy to search for members of.
filter query string The filter expression that should be used to limit the results.
offset query integer The offset to start retrieving records from.
limit query integer The maximum records to return. [1-5000]
sort query string The property to sort by.
parameters query dictionary Full set of query string parameters in a JSON formatted dictionary.
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policy_members(id="string" ,
filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryContentUpdatePolicyMembers(id="string" ,
filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryContentUpdatePolicyMembers" ,
id="string" ,
filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
Search for content versions available for pinning given the category.
query_pinnable_content_versions
Method Route
/policy/queries/content-update-pin-versions/v1
Produces: application/json
Name Service Uber Type Data type Description
category query string Content category. rapid_response_al_bl_listing
sensor_operations
system_critical
vulnerability_management
sort query string The value to sort returned content versions by. Defaults to deployed_timestamp.desc
. Available values: deployed_timestamp.asc
, deployed_timestamp.desc
parameters query dictionary Full set of query string parameters in a JSON formatted dictionary.
from falconpy.content_update_policies import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_pinnable_content_versions(category="string" , sort="string" )
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryPinnableContentVersions(category="string" , sort="string" )
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryPinnableContentVersions" , category="string" , sort="string" )
print(response)
Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policy IDs which match the filter criteria.
query_policies
Method Route
/policy/queries/content-update/v1
Produces: application/json
Name Service Uber Type Data type Description
filter query string The filter expression that should be used to limit the results.
offset query integer The offset to start retrieving records from.
limit query integer The maximum records to return. [1-5000]
sort query string The property to sort by.
parameters query dictionary Full set of query string parameters in a JSON formatted dictionary.
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policies(filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryContentUpdatePolicies(filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryContentUpdatePolicies" ,
filter="string" ,
offset=integer,
limit=integer,
sort="string"
)
print(response)