crowdstrike.falcon.falconctl_info module – Get values associated with Falcon sensor.

Note

This module is part of the crowdstrike.falcon collection (version 4.7.2).

To install it, use: ansible-galaxy collection install crowdstrike.falcon.

To use it in a playbook, specify: crowdstrike.falcon.falconctl_info.

New in crowdstrike.falcon 3.2.0

Synopsis

  • Return value associated with the Falcon sensor options.

  • This module is similar to the GET option in falconctl cli.

Parameters

Parameter

Comments

name

list / elements=string

A list of falconctl GET options to query.

Choices:

  • "cid"

  • "aid"

  • "apd"

  • "aph"

  • "app"

  • "trace"

  • "feature"

  • "metadata_query"

  • "message_log"

  • "billing"

  • "tags"

  • "version"

  • "rfm_state"

  • "rfm_reason"

  • "backend"

Examples

- name: Get all Falcon sensor options
  crowdstrike.falcon.falconctl_info:

- name: Get a subset of Falcon sensor options
  crowdstike.falcon.falconctl_info:
    name:
      - 'cid'
      - 'aid'
      - 'tags'

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

falconctl_info

dictionary

The dictionary containing values of requested Falcon sensor options.

Option values consist of strings, or null for options not set.

Returned: success

Sample: {"cid": "53abc1234c584115a46efc25dd831a2b", "message_log": "True", "tags": null}

Authors

  • Carlos Matos (@carlosmmatos)

  • Gabriel Alford (@redhatrises)