Third party ingestion

Command	Permission
Register-FalconEventCollector
Send-FalconEvent
Send-FalconWebhook
Show-FalconEventCollector
Unregister-FalconEventCollector

Humio event ingestion

Configure a Humio collector

The -Enable parameter is optional and will configure PSFalcon to send requests or responses to Humio as they occur.

Register-FalconEventCollector -Uri https://cloud.community.humio.com -Token <string> -Enable responses, requests

The -Token parameter expects your Humio ingest token.

Display your collector

Show-FalconEventCollector

Remove your collector

Unregister-FalconEventCollector

Send objects to Humio

Once a collector has been defined through Register-FalconEventCollector, any [PSCustomObject] can be sent to Humio.

Get-FalconHost -Limit 1 -Detailed | Send-FalconEvent

Send-FalconEvent -Object ([PSCustomObject]@{ Example = 'my_string' })

Webhook ingestion

Send objects to Slack

Any [PSCustomObject] can be sent to a Slack webhook.

Get-FalconHost -Limit 1 -Detailed | Send-FalconWebhook -Type Slack -Uri https://hooks.slack.com/services/... 

Send-FalconWebhook -Type Slack -Uri https://hooks.slack.com/services/... -Object ([PSCustomObject]@{ Example = 'my_string' })