-
Notifications
You must be signed in to change notification settings - Fork 17
/
Copy pathGet-CsReportInfo.psm1
90 lines (77 loc) · 2.55 KB
/
Get-CsReportInfo.psm1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
function Get-CsReportInfo {
<#
.SYNOPSIS
Retrieve info about specific reports
.PARAMETER FILTER
Filter your query by specifying FQL filter parameters
.PARAMETER QUERY
Perform a generic substring search across all fields
.PARAMETER LIMIT
The maximum records to return [default: 500]
.PARAMETER OFFSET
The offset to start retrieving records from [default: 0]
.PARAMETER ALL
Repeat request until all results are returned
.PARAMETER ID
IDs of the reports you want to retrieve
.PARAMETER FIELD
The fields to return, or a predefined set of fields in the form of the collection
name surrounded by two underscores [default: '__basic__']
#>
[CmdletBinding(DefaultParameterSetName = 'combined')]
[OutputType([psobject])]
param(
[Parameter(ParameterSetName = 'combined')]
[string]
$Filter,
[Parameter(ParameterSetName = 'combined')]
[string]
$Query,
[Parameter(ParameterSetName = 'combined')]
[ValidateRange(1,500)]
[int]
$Limit = 500,
[Parameter(ParameterSetName = 'combined')]
[int]
$Offset = 0,
[Parameter(ParameterSetName = 'combined')]
[switch]
$All,
[Parameter(ParameterSetName = 'entities', Mandatory = $true)]
[array]
$Id,
[Parameter(ParameterSetName = 'combined')]
[Parameter(ParameterSetName = 'entities')]
[array]
$Field = @('__basic__')
)
process{
$Param = @{
Uri = '/intel/combined/reports/v1?limit=' + [string] $Limit + '&offset=' + [string] $Offset +
'&fields=' + ($Field -join '&fields=')
Method = 'get'
Header = @{
accept = 'application/json'
'content-type' = 'application/json'
}
}
switch ($PSBoundParameters.Keys) {
'Filter' { $Param.Uri += '&filter=' + $Filter }
'Query' { $Param.Uri += '&q=' + $Query }
'Id' {
$Param.Uri = '/intel/entities/reports/v1?fields=' + ($Field -join '&fields=') + '&ids='
}
'Verbose' { $Param['Verbose'] = $true }
'Debug' { $Param['Debug'] = $true }
}
if ($Id) {
Split-CsArray -Activity $MyInvocation.MyCommand.Name -Param $Param -Id $Id
}
elseif ($All) {
Join-CsResult -Activity $MyInvocation.MyCommand.Name -Param $Param
}
else {
Invoke-CsAPI @Param
}
}
}