Update output-selected-host-info-and-replace-ids-with-names.ps1

[David-M-Berry]

Added the Hostname param.

The script still runs normally, but if you add the -Hostname "SPECIFICHOSTNAME" you can just get the output for a single host.

Update output-selected-host-info-and-replace-ids-with-names.ps1 to allow specific hostnames

• [x] Enhancement

Added features and functionality

• Added Hostname parameter and filtering by the hostname if the parameter is provided at script execution.

Explanation of Changes

1. Hostname Parameter:

This allows the script to accept a hostname as an optional parameter.

   Param (
       [string]$Hostname
   )

3. Filtering Host Information:

This filters the retrieved host information to include only the specified hostname if provided.

   # Filter by hostname if the parameter is provided
   if ($Hostname) {
       $HostInfo = $HostInfo | Where-Object { $_.hostname -eq $Hostname }
   }

Usage

• To run the script without filtering by hostname:

  .\output-selected-host-info-and-replace-ids-with-names.ps1

• To run the script and filter by a specific hostname:

  .\output-selected-host-info-and-replace-ids-with-names.ps1 -Hostname "SpecificHostname"

This update ensures that the script can be used to retrieve information for all hosts or for a specific host, based on user input.

[bk-cs]

Thank you for the suggestion! Can you redo your pull under the dev branch?

It would also be more effective to use $Hostname in a filtered Get-FalconHost search instead of pulling all host info and then filtering to your specific device. Here's how that would look:

#Requires -Version 5.1
using module @{ModuleName='PSFalcon';ModuleVersion ='2.2'}
<#
.SYNOPSIS
Output host information, but replace identifiers with their relevant 'name' value
.PARAMETER Hostname
Export a specific device by hostname
.NOTES
Fields in the output can be defined by updating the '$Field' variable. Output is returned to the console, but
can be piped to a file.
#>
param(
    [string]$Hostname
)
# Fields to include with the export to CSV (host group and policy data is automatically added)
[string[]]$Field = 'device_id','hostname','last_seen','first_seen','local_ip','external_ip','agent_version'
$Field += 'device_policies','groups'

# Retrieve all host information and filter to selected fields
$HostInfo = if ($Hostname) {
  Get-FalconHost -Filter "hostname:'$Hostname'" -Detailed | Select-Object $Field
} else {
  Get-FalconHost -Detailed -All | Select-Object $Field
}