Blog Viewer

Cb Defense: How To Export All Devices Using API

By CB_Support posted Nov 01, 2021 09:25 PM

  

Environment

  • Cb Defense Web Console: December 2017 release and above

Objective

  • Use one API call to export all Cb Defense Sensors from the Enrollment page in the Web Console

Resolution

Use the following API calls to export all Cb Defense Sensors in either CSV or JSON format

 

Using curl

  • curl -H 'x-auth-token:<apikey>/<connectorid>' -X GET '{API_URLForYourEnvironment}/integrationServices/v3/device/all?fileFormat=csv'
  • curl -H 'x-auth-token:<apikey>/<connectorid>' -X GET '{API_URLForYourEnvironment}/integrationServices/v3/device/all?fileFormat=json'

 

Using Invoke-WebRequest

  • Invoke-WebRequest -Uri {API_URLForYourEnvironment}/integrationServices/v3/device/all?fileFormat=csv -Headers @{'X-Auth-Token'=<apikey>/<connectorid>}'
  • Invoke-WebRequest -Uri {API_URLForYourEnvironment}/integrationServices/v3/device/all?fileFormat=json -Headers @{'X-Auth-Token'=<apikey>/<connectorid>}'

Additional Notes

There is currently a limitation of 100k records even using this new API call. If your organization has more devices than this and you need to export all records at once, please submit a new case (Help > Open Case at the top of all pages in the User Exchange) requesting an increase. Without using the above API calls there is a hard limit of 5k rows per call built into the API even using pagination parameters, and a maximum of 15k records can be returned. You can also use the CSV Export button on the Enrollment page to export up to 10k records at once.


Related Content



#AuditandRemediation
#CarbonBlackCloud
#Prevention
#Workload
#EnterpriseEDR
#EndpointStandard
#ManagedDetection
#Container
0 comments
0 views

Permalink