Check Command Status and Get Process Flow Action

Checks the Carbon Black command status and retrieves processes to use in the flow.

The Check Command Status and Get Process Flow Action can be used with any flow to check a Carbon Black command status and get processes within the flow.

Results

Possible results for this flow action are:

Result Description Success Command status returned and processes created. Failure Command status or process error. More error information is available in the flow action output error.

Input variables

Input variables determine the initial behavior of the flow action.

Variable Description api_token Carbon Black API key. endpoint_base Base URL of the Carbon Black API. session_id Session identifier. command_id Command identifier. use_mid_server Determines whether the REST activity uses the MID server to interact with Carbon Black or not.

Output variables

The output variables contain data that can be used in subsequent activities.

Variable Description status_code Determines if the request was successful. If not, displays an HTTP error code and message. output API variables

Parent Topic:Security Operations Carbon Black Integration - Get Running Processes Flow