Edit FalconReconAction

Edit-FalconReconAction

SYNOPSIS

Modify a Falcon Intelligence Recon action

DESCRIPTION

Requires 'Monitoring rules (Falcon Intelligence Recon): Write'.

PARAMETERS

Name	Type	Description	Min	Max	Allowed	Pipeline	PipelineByName
Frequency	String	Action frequency			asap daily weekly		X
Recipient	String[]	Email address					X
Status	String	Action status			enabled muted		X
ContentFormat	String	Email format			standard enhanced		X
TriggerMatchless	Boolean	Send email when no matches are found					X
Id	String	Action identifier					X

SYNTAX

Edit-FalconReconAction [-Frequency] <String> [-Recipient] <String[]> [-Status] <String> [-ContentFormat] <String> [-TriggerMatchless] <Boolean> [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

PATCH /recon/entities/actions/v1

falconpy

UpdateActionV1

USAGE

Updating email notifications for a monitoring rule

Edit-FalconReconAction -Id <id> -Frequency weekly

2023-04-25: PSFalcon v2.2.5