Get FalconNgsCaseNotificationGroup

Get-FalconNgsCaseNotificationGroup

SYNOPSIS

Search for Falcon NGSIEM case notification groups

DESCRIPTION

Requires 'Case Templates: Read'.

PARAMETERS

Name	Type	Description	Min	Max	Allowed	Pipeline	PipelineByName
Id	String[]	Notification group identifier				X	X
Filter	String	Falcon Query Language expression to limit results channels.recipients channels.type created_by.username created_timestamp name updated_by.username updated_timestamp
Limit	Int32	Maximum number of results per request
Offset	Int32	Position to begin retrieving results
Detailed	Switch	Retrieve detailed information
All	Switch	Repeat requests until all available results are retrieved
Total	Switch	Display total result count instead of results

SYNTAX

Get-FalconNgsCaseNotificationGroup [[-Filter] <String>] [[-Limit] <Int32>] [-Offset <Int32>] [-Detailed] [-All] [-Total] [-WhatIf] [-Confirm] [<CommonParameters>]

Get-FalconNgsCaseNotificationGroup -Id <String[]> [-WhatIf] [-Confirm] [<CommonParameters>]

REFERENCE

Endpoints

GET /casemgmt/entities/notification-groups/v1
GET /casemgmt/queries/notification-groups/v1

falconpy

queries_notification_groups_get_v1
entities_notification_groups_get_v1

USAGE

Search for notification groups

Get-FalconNgsCaseNotificationGroup -Filter "channels.type:'slack'" -Limit 5

Retrieve detailed information for notification group identifiers

Get-FalconNgsCaseNotificationGroup -Id <id>,<id>

2025-09-26: PSFalcon v2.2.9