CreateFdrFeed
is used to
input data for creating an FDR feed.
Table: CreateFdrFeed
Parameter | Type | Required | Default | Stability | Description |
---|---|---|---|---|---|
Some arguments may be required, as indicated in the Required column. For some fields, this column indicates that a result will always be returned for this column. | |||||
Table last updated: Mar 28, 2025 | |||||
clientID | string | yes | Long-Term | The AWS client identifier of the FDR feed. | |
clientSecret | string | yes | Long-Term | The AWS client secret of the FDR feed. | |
description | string | Long-Term | A description of the FDR feed. | ||
enabled | boolean | yes | true | Long-Term | Whether ingest from the FDR feed is enabled. |
Name | string | yes | Long-Term | The name of the FDR feed. | |
parser | string | yes | Long-Term | The unique identifier or name of the parser that should be used to parse the FDR data. We recommend using the FDR parser from the crowdstrike/fdr package, which can be referred to as crowdstrike/fdr:FDR. | |
repositoryName | string | yes | Long-Term | The name of the repository of the FDR feed. | |
s3Identifier | string | yes | Long-Term | The AWS S3 identifier of the FDR feed. | |
sqsUrl | string | yes | Long-Term | The AWS SQS queue URL of the FDR feed. |