<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Get-Idea to use api get all endpoint with last seen in Cortex XDR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/get-idea-to-use-api-get-all-endpoint-with-last-seen/m-p/528729#M3477</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/261687"&gt;@Pattarachai-FTH&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;This can be accomplished by using the &lt;A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-API-Reference/Get-Endpoint" target="_self"&gt;Get Endpoint&lt;/A&gt; API. Within your request body, you can filter on the &lt;EM&gt;last_seen&lt;/EM&gt; field with your desired time range. Keep in mind that the expected input is epoch milliseconds for this particular field.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If you are new to working with the Cortex XDR API or APIs in general, you may benefit from viewing the &lt;A href="https://live.paloaltonetworks.com/t5/cortex-xdr-webinars/cortex-xdr-customer-success-webinar-intro-to-api/ta-p/522127" target="_self"&gt;Intro to API Webinar&lt;/A&gt;.&lt;/P&gt;</description>
    <pubDate>Thu, 26 Jan 2023 16:07:24 GMT</pubDate>
    <dc:creator>timurphy</dc:creator>
    <dc:date>2023-01-26T16:07:24Z</dc:date>
    <item>
      <title>Get-Idea to use api get all endpoint with last seen</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/get-idea-to-use-api-get-all-endpoint-with-last-seen/m-p/528666#M3472</link>
      <description>&lt;P&gt;Hi Expert ,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I would like to get all endpoint install xdr but would&amp;nbsp; like to know condition last seen such as more than 1 month I use python&amp;nbsp;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Thank you&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Thu, 26 Jan 2023 04:46:09 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/get-idea-to-use-api-get-all-endpoint-with-last-seen/m-p/528666#M3472</guid>
      <dc:creator>Pattarachai-FTH</dc:creator>
      <dc:date>2023-01-26T04:46:09Z</dc:date>
    </item>
    <item>
      <title>Re: Get-Idea to use api get all endpoint with last seen</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/get-idea-to-use-api-get-all-endpoint-with-last-seen/m-p/528729#M3477</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/261687"&gt;@Pattarachai-FTH&lt;/a&gt;,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;This can be accomplished by using the &lt;A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-API-Reference/Get-Endpoint" target="_self"&gt;Get Endpoint&lt;/A&gt; API. Within your request body, you can filter on the &lt;EM&gt;last_seen&lt;/EM&gt; field with your desired time range. Keep in mind that the expected input is epoch milliseconds for this particular field.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If you are new to working with the Cortex XDR API or APIs in general, you may benefit from viewing the &lt;A href="https://live.paloaltonetworks.com/t5/cortex-xdr-webinars/cortex-xdr-customer-success-webinar-intro-to-api/ta-p/522127" target="_self"&gt;Intro to API Webinar&lt;/A&gt;.&lt;/P&gt;</description>
      <pubDate>Thu, 26 Jan 2023 16:07:24 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/get-idea-to-use-api-get-all-endpoint-with-last-seen/m-p/528729#M3477</guid>
      <dc:creator>timurphy</dc:creator>
      <dc:date>2023-01-26T16:07:24Z</dc:date>
    </item>
  </channel>
</rss>

