CreateFdrFeed is used to input data for creating an FDR feed.

Table: CreateFdrFeed

ParameterTypeRequiredDefaultStabilityDescription
Some arguments may be required, as indicated in the Required column. For return datatypes, this indicates that you must specify which fields you want returned in the results.
Table last updated: Mar 28, 2025
clientIdstringyes Long-TermThe AWS client identifier of the FDR feed.
clientSecretstringyes Long-TermThe AWS client secret of the FDR feed.
descriptionstring  Long-TermA description of the FDR feed.
enabledbooleanyestrueLong-TermWhether ingest from the FDR feed is enabled.
namestringyes Long-TermThe name of the FDR feed.
parserstringyes Long-TermThe unique identifier or name of the parser that should be used to parse the FDR data. We recommend using the FDR parser from the crowdstrike/fdr package, which can be referred to as crowdstrike/fdr:FDR.
repositoryNamestringyes Long-TermThe name of the repository of the FDR feed.
s3Identifierstringyes Long-TermThe AWS S3 identifier of the FDR feed.
sqsUrlstringyes Long-TermThe AWS SQS queue URL of the FDR feed.