ansible_collection_falcon icon indicating copy to clipboard operation
ansible_collection_falcon copied to clipboard

update sensor_download module to use new v2 endpoint

Open carlosmmatos opened this issue 10 months ago • 0 comments

Falcon now has a V2 endpoint to query combined sensor installers.

As this was added in FalconPy 1.4.2, to maintain backwards compatibility with FalconPy 1.3.0+ we will need to take advantage of the override functionality to pass in the new api endpoint..

Example:

from falconpy import SensorDownload

sensor = SensorDownload() 
results = sensor.override("GET", "/sensors/combined/installers/v2", parameters={'filter': "platform:'linux'+architectures:'s390x'", 'limit': 5})

The above overrides the SensorDownload SC and specifies the new parameters needed for v2. The main driver behind doing this is because V2 now allows us to query for architectures !!! 💯

carlosmmatos avatar Apr 06 '24 19:04 carlosmmatos