Save Filter

POST {{baseUrl}}/web/api/v2.1/filters

Save a new filter to get a list of matching endpoints. When you save a filter, you can run actions on the Agents as a set of objects or create a dynamic group (automatically adds new Agents that match the filter and drops Agents if they change to not match). For example, you can save a filter with {data:{filterFields:{infected:true}}} to run kill and quarantine commands on all the Agents at once, or to create a group that holds currently infected endpoints. Best Practice: Set a scope for the new Saved Filter. Run accounts, sites, or groups to get the IDs for the scope.

HEADERS