CreateFdrFeed is an input datatype for creating an FDR feed. It's used by the createFdrFeed() mutation field.

Table: CreateFdrFeed

ParameterTypeRequiredDefaultStabilityDescription
Some input parameters may be required, as indicated in the Required column. For return values, this indicates that you are assured a value if the field is requested for the results.
Table last updated: Mar 28, 2025
clientIdstringyes Long-TermThe AWS client identifier of the FDR feed.
clientSecretstringyes Long-TermThe AWS client secret of the FDR feed.
descriptionstring  Long-TermA description of the FDR feed.
enabledbooleanyestrueLong-TermWhether ingest from the FDR feed is enabled.
namestringyes Long-TermThe name of the FDR feed.
parserstringyes Long-TermThe unique identifier or name of the parser that should be used to parse the FDR data. We recommend using the FDR parser from the crowdstrike/fdr package, which can be referred to as crowdstrike/fdr:FDR.
repositoryNamestringyes Long-TermThe name of the repository of the FDR feed.
s3Identifierstringyes Long-TermThe AWS S3 identifier of the FDR feed.
sqsUrlstringyes Long-TermThe AWS SQS queue URL of the FDR feed.