

| Operation ID | Description |
| Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria. |
| Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policies which match the filter criteria. |
| Perform the specified action on the Content Update Policies specified in the request. |
| Sets the precedence of Content Update Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies when updating precedence. |
| Retrieve a set of Content Update Policies by specifying their IDs. |
| Create Content Update Policies by specifying details about the policy to create. |
| Delete a set of Content Update Policies by specifying their IDs. |
| Update Content Update Policies by specifying the ID of the policy and details to update. |
| Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria. |
| Search for content versions available for pinning given the category. |
| Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policy IDs which match the filter criteria. |
Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of host details which match the filter criteria.
query_policy_members_combined
| Method | Route |
 | /policy/combined/content-update-members/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| id |  |  | query | string | The ID of the Content Update Policy to search for members of. |
| filter |  |  | query | string | The filter expression that should be used to limit the results. |
| offset |  |  | query | integer | The offset to start retrieving records from. |
| limit |  |  | query | integer | The maximum records to return. [1-5000] |
| sort |  |  | query | string | The property to sort by. |
| parameters |  |  | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policy_members_combined(id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryCombinedContentUpdatePolicyMembers(id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryCombinedContentUpdatePolicyMembers",
id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policies which match the filter criteria.
query_policies_combined
| Method | Route |
 | /policy/combined/content-update/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| filter |  |  | query | string | The filter expression that should be used to limit the results. |
| offset |  |  | query | integer | The offset to start retrieving records from. |
| limit |  |  | query | integer | The maximum records to return. [1-5000] |
| sort |  |  | query | string | The property to sort by. |
| parameters |  |  | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policies_combined(filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryCombinedContentUpdatePolicies(filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryCombinedContentUpdatePolicies",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
Perform the specified action on the Content Update Policies specified in the request.
perform_action
| Method | Route |
 | /policy/entities/content-update-actions/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| action_name |  |  | query | string | The action to perform.
Allowed values:add-host-groupdisableenableoverride-allowoverride-pauseoverride-revertremove-host-groupremove-pinned-content-versionset-pinned-content-version
|
| action_parameters |  |  | query | dictionary or list of dictionaries | Action specific parameter options. |
| body |  |  | body | dictionary | Full body payload as JSON formatted dictionary. |
| ids |  |  | body | string or list of strings | Content update policy IDs to perform action against. |
| parameters |  |  | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
act_params = {
"name": "string",
"value": "string"
}
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.perform_action(action_name="string",
action_parameters=act_params,
ids=id_list
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
act_params = {
"name": "string",
"value": "string"
}
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.performContentUpdatePoliciesAction(action_name="string",
action_parameters=act_params,
ids=id_list
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"action_parameters": [
{
"name": "string",
"value": "string"
}
],
"ids": [
"string"
]
}
response = falcon.command("performContentUpdatePoliciesAction",
action_name="string",
body=body_payload
)
print(response)
Sets the precedence of Content Update Policies based on the order of IDs specified in the request. The first ID specified will have the highest precedence and the last ID specified will have the lowest. You must specify all non-Default Policies when updating precedence.
set_precedence
| Method | Route |
 | /policy/entities/content-update-precedence/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| body |  |  | body | dictionary | Full body payload as JSON formatted dictionary. |
| ids |  |  | body | string or list of strings | ID list in precedence order. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.set_precedence(ids=id_list)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.setContentUpdatePoliciesPrecedence(ids=id_list)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"ids": [
"string"
]
}
response = falcon.command("setContentUpdatePoliciesPrecedence", body=body_payload)
print(response)
Retrieve a set of Content Update Policies by specifying their IDs.
get_policies
| Method | Route |
 | /policy/entities/content-update/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| ids |  |  | query | string or list of strings | Content update policy IDs to return. |
| parameters |  |  | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.get_policies(ids=id_list)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.getContentUpdatePolicies(ids=id_list)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("getContentUpdatePolicies", ids=id_list)
print(response)
Create Content Update Policies by specifying details about the policy to create.
create_policies
| Method | Route |
 | /policy/entities/content-update/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| body |  |  | body | dictionary | Full body payload as JSON formatted dictionary. |
| description |  |  | body | string | Content Update policy description. |
| name |  |  | body | string | Content Update policy name. |
| settings |  |  | body | dictionary | Content Update policy settings. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
response = falcon.create_policies(description="string", name="string", settings=policy_settings)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
response = falcon.createContentUpdatePolicies(description="string",
name="string",
settings=policy_settings
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"resources": [
{
"description": "string",
"name": "string",
"settings": {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
}
]
}
response = falcon.command("createContentUpdatePolicies", body=body_payload)
print(response)
Delete a set of Content Update Policies by specifying their IDs.
delete_policies
| Method | Route |
 | /policy/entities/content-update/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| ids |  |  | query | string or list of strings | Content update policy IDs to remove. |
| parameters |  |  | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.delete_policies(ids=id_list)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.deleteContentUpdatePolicies(ids=id_list)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
id_list = 'ID1,ID2,ID3' # Can also pass a list here: ['ID1', 'ID2', 'ID3']
response = falcon.command("deleteContentUpdatePolicies", ids=id_list)
print(response)
Update Content Update Policies by specifying the ID of the policy and details to update.
update_policies
| Method | Route |
 | /policy/entities/content-update/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| body |  |  | body | dictionary | Full body payload as JSON formatted dictionary. |
| description |  |  | body | string | Content Update policy description. |
| id |  |  | body | string | Content Update policy ID to update. |
| name |  |  | body | string | Content Update policy name. |
| settings |  |  | body | dictionary | Content Update policy settings. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
response = falcon.update_policies(description="string",
id="string",
name="string",
settings=policy_settings
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
policy_settings = {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
response = falcon.updateContentUpdatePolicies(description="string",
id="string",
name="string",
settings=policy_settings
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
body_payload = {
"resources": [
{
"description": "string",
"id": "string",
"name": "string",
"settings": {
"ring_assignment_settings": [
{
"delay_hours": "string",
"id": "string",
"ring_assignment": "string"
}
]
}
}
]
}
response = falcon.command("updateContentUpdatePolicies", body=body_payload)
print(response)
Search for members of a Content Update Policy in your environment by providing an FQL filter and paging details. Returns a set of Agent IDs which match the filter criteria.
query_policy_members
| Method | Route |
 | /policy/queries/content-update-members/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| id |  |  | query | string | The ID of the Content Update Policy to search for members of. |
| filter |  |  | query | string | The filter expression that should be used to limit the results. |
| offset |  |  | query | integer | The offset to start retrieving records from. |
| limit |  |  | query | integer | The maximum records to return. [1-5000] |
| sort |  |  | query | string | The property to sort by. |
| parameters |  |  | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policy_members(id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryContentUpdatePolicyMembers(id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryContentUpdatePolicyMembers",
id="string",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
Search for content versions available for pinning given the category.
query_pinnable_content_versions
| Method | Route |
 | /policy/queries/content-update-pin-versions/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| category |  |  | query | string | Content category.
rapid_response_al_bl_listingsensor_operationssystem_criticalvulnerability_management
|
| sort |  |  | query | string | The value to sort returned content versions by. Defaults to deployed_timestamp.desc. Available values: deployed_timestamp.asc, deployed_timestamp.desc |
| parameters |  |  | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy.content_update_policies import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_pinnable_content_versions(category="string", sort="string")
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryPinnableContentVersions(category="string", sort="string")
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryPinnableContentVersions", category="string", sort="string")
print(response)
Search for Content Update Policies in your environment by providing an FQL filter and paging details. Returns a set of Content Update Policy IDs which match the filter criteria.
query_policies
| Method | Route |
 | /policy/queries/content-update/v1 |

- Produces: application/json
| Name | Service | Uber | Type | Data type | Description |
| filter |  |  | query | string | The filter expression that should be used to limit the results. |
| offset |  |  | query | integer | The offset to start retrieving records from. |
| limit |  |  | query | integer | The maximum records to return. [1-5000] |
| sort |  |  | query | string | The property to sort by. |
| parameters |  |  | query | dictionary | Full set of query string parameters in a JSON formatted dictionary. |
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.query_policies(filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import ContentUpdatePolicies
falcon = ContentUpdatePolicies(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.queryContentUpdatePolicies(filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)
from falconpy import APIHarnessV2
falcon = APIHarnessV2(client_id=CLIENT_ID,
client_secret=CLIENT_SECRET
)
response = falcon.command("queryContentUpdatePolicies",
filter="string",
offset=integer,
limit=integer,
sort="string"
)
print(response)