get_policy_match_stats
Analyze endpoint alignment with policies by filtering assets based on name, IP, group, platform, status, tags, and more. Gain insights into policy match statistics for digital forensics and incident response.
Instructions
Get statistics on how many endpoints match each policy based on filter criteria
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| excludedEndpointIds | No | Exclude these endpoint IDs | |
| groupFullPath | No | Filter assets by full group path | |
| groupId | No | Filter assets by group ID | |
| includedEndpointIds | No | Include only these endpoint IDs | |
| ipAddress | No | Filter assets by IP address | |
| isolationStatus | No | Filter assets by isolation status (e.g., ["isolated"]) | |
| issue | No | Filter assets by issue | |
| managedStatus | No | Filter assets by managed status (e.g., ["managed"]) | |
| name | No | Filter assets by name | |
| onlineStatus | No | Filter assets by online status (e.g., ["online"]) | |
| organizationIds | No | Organization IDs to filter by. Defaults to [0]. | |
| platform | No | Filter assets by platform (e.g., ["windows"]) | |
| policy | No | Filter assets by policy name | |
| searchTerm | No | General search term for filtering assets | |
| tags | No | Filter assets by tags | |
| version | No | Filter assets by agent version |