crowdstrike-falcon-last-scheduled-search
Returns the latest successful execution of the scheduled search with the given name.
Syntax
crowdstrike-falcon-last-scheduled-search [profile=STRING] name=STRING
Options
- profile=STRING
- Optional. Connect profile code of CrowdStrike Falcon
- name=STRING
- Required. Name of the scheduled search. Specify exactly one name, a comma separated list is not supported.
Output fields
| Field | Type | Name | Description |
|---|---|---|---|
| profile | String | Connect profile | Connect profile code |
| id | String | ID | Search ID |
| name | String | Name | Search name |
| created | Date | Created | Search creation time |
| finish_time | Date | Finish Time | Search finish time |
| result_count | Int | Result Count | Number of results |
| from | Date | From | Search window start time |
| to | Date | To | Search window end time |
| duration | Int | Duration | Search duration in milliseconds |
| status | String | Status | Search status |
| expire_time | Date | Expire Time | Search expiry time |
| format | String | Format | Report format (json, csv, pdf) |