IP address filtering

[RoYoMi]

Trying to use the filter to find all devices with a given subnet.

Get-FalconHost -filter "local_ip:'10.6.25.57'"
works as expected, returning my computer.

Get-FalconHost -filter "local_ip:*'10.6.25.*'"
returns
[{"code":400,"message":"invalid IP address for local_ip: 10.6.25.*"}]

[bk-cs]

This is not specific to PSFalcon, but how the APIs work with the local_ip property. You need to use local_ip.raw with wildcards:

Get-FalconHost -Filter "local_ip.raw:*'10.6.25.*'"

Host and Host Group Management APIs - Device Filters [ EU-1 | US-1 | US-2 | US-GOV-1 ]

[RoYoMi]

Interesting. That works.

Should probably update https://github.com/CrowdStrike/psfalcon/wiki/Filtering-Results