assign_log_retrieval_task
Initiate log retrieval tasks from specific endpoints by providing endpoint and organization IDs. Filters endpoints by managed status to streamline forensic and incident response processes.
Instructions
Assign a log retrieval task to specific endpoints
Input Schema
Name | Required | Description | Default |
---|---|---|---|
endpointIds | Yes | Endpoint ID(s) to retrieve logs from. Can be a single ID or an array of IDs. | |
managedStatus | No | Filter endpoints by managed status. Default is ["managed"]. | |
organizationIds | Yes | Organization ID(s) to filter endpoints by. This is REQUIRED to identify the correct endpoints. Examples: 0, "123", [0], ["123", "456"] |