Palo Alto Cortex - Search Endpoints
This atomic belongs to the Palo Alto Cortex atomic group.
Gets a list of endpoints based on a search filter. If a hostname, IP address, or endpoint ID is provided, the endpoints will be filtered. If no filters are provided, all endpoints are returned. The first endpoint's ID is also provided in a separate output variable. Please refer to the Cortex documentation for information about required licenses and permissions.
Target: Palo Alto Cortex integration target or HTTP Endpoint for "api-your-instance.xdr.region.paloaltonetworks.com" with a path of "/public_api/v1"
Account Key: None if using an integration-provided target, API key and API key ID if using an HTTP Endpoint target
Steps:
[]> Build the authorization headers and request payload
[]> Search for endpoints
[]> Check if the request was successful:
[]> If it was, set the output variables and try to extract the first result's ID
[]> If it wasn't, output an error
More information about this API: https://cortex-panw.stoplight.io/docs/cortex-xdr/b149d40bd4c51-get-endpoint