Edit FalconNgsCaseSla

Edit-FalconNgsCaseSla

SYNOPSIS

Modify a Falcon NGSIEM case SLA

DESCRIPTION

Requires 'Case Templates: Write'.

PARAMETERS

Name	Type	Description	Min	Max	Allowed	Pipeline	PipelineByName
Name	String	SLA name					X
Description	String	SLA description					X
Goal	Object[]	Objects containing 'goals' properties ('duration_seconds', 'escalation_policy', 'type')					X
Id	String	SLA identifier				X	X

SYNTAX

Edit-FalconNgsCaseSla [[-Name] <String>] [[-Description] <String>] [[-Goal] <Object[]>] [-Id] <String> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

PATCH /casemgmt/entities/slas/v1

falconpy

entities_slas_patch_v1

USAGE

Update an SLA

Edit-FalconNgsCaseSla -Name 'high severity' -Description 'SLA for high severity cases' -Goal @{ duration_seconds = 120; escalation_policy = @{ steps = @(@{ escalate_after_seconds = 0; notification_group_id = 'id' })}; type = 'ack' }, @{ duration_seconds = 300; type = 'resolve' } -Id <id>

2025-09-26: PSFalcon v2.2.9