Receive FalconNgsSavedQuery
Download a Falcon NGSIEM saved query YAML template
Requires 'NGSIEM Saved Queries: Read'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Path | String | Destination path | |||||
| Id | String | Saved query identifier | X | ||||
| Domain | String | Repository or view |
alldashboardsfalconthird-party
|
X | |||
| Force | Switch | Overwrite an existing file when present |
Receive-FalconNgsSavedQuery [[-Path] <String>] [-Id] <String> [-Domain] <String> [-Force] [-WhatIf] [-Confirm] [<CommonParameters>]GET /ngsiem-content/entities/savedqueries-template/v1
2025-09-02: PSFalcon v2.2.9
