taniumrest.json

{
    "appid": "3b878e99-4561-434c-8fd6-3e224334af6a",
    "name": "Tanium REST",
    "description": "This app supports investigative and generic actions on Tanium",
    "type": "endpoint",
    "product_vendor": "Tanium",
    "logo": "logo_taniumrest.svg",
    "logo_dark": "logo_taniumrest_dark.svg",
    "product_name": "Tanium REST",
    "product_version_regex": ".*",
    "publisher": "Splunk",
    "python_version": "3",
    "fips_compliant": true,
    "license": "Copyright (c) 2019-2024 Splunk Inc.",
    "latest_tested_versions": [
        "Build (Windows): 7.5.4.1158 | Console: 3.2.24"
    ],
    "app_version": "2.3.0",
    "utctime_updated": "2022-01-07T20:22:22.000001Z",
    "package_name": "phantom_taniumrest",
    "main_module": "taniumrest_connector.py",
    "min_phantom_version": "6.1.1",
    "app_wizard_version": "1.0.0",
    "configuration": {
        "base_url": {
            "description": "Base URL (e.g. https://taniumserver)",
            "data_type": "string",
            "required": true,
            "order": 0
        },
        "api_token": {
            "description": "API Token",
            "data_type": "password",
            "order": 1
        },
        "username": {
            "description": "Username",
            "data_type": "string",
            "order": 2
        },
        "password": {
            "description": "Password",
            "data_type": "password",
            "order": 3
        },
        "verify_server_cert": {
            "description": "Verify Server Certificate",
            "data_type": "boolean",
            "default": false,
            "order": 4
        },
        "results_percentage": {
            "description": "Consider question results complete at (% out of 100)",
            "data_type": "numeric",
            "default": 99,
            "order": 5
        }
    },
    "actions": [
        {
            "action": "test connectivity",
            "description": "Validate the asset configuration for connectivity using supplied configuration",
            "type": "test",
            "identifier": "test_connectivity",
            "read_only": true,
            "parameters": {},
            "output": [],
            "versions": "EQ(*)"
        },
        {
            "action": "list processes",
            "description": "List the running processes of the devices registered on the Tanium server",
            "verbose": "This action requires specifying a sensor to be used to list processes. A standard Tanium sensor, 'Process Details' is used by default but a different sensor can be specified instead. Note that the 'Process Details' sensor may not be available on all Tanium deployments. Note that at this time this action only supports limiting the query to specified computer groups, but a generic Run Query action can be constructed to query an in individual computer's processes. As pagination is not implemented, the result(s) of the action will be the result(s) that are fetched in a single API call.",
            "type": "investigate",
            "identifier": "list_processes",
            "read_only": true,
            "parameters": {
                "sensor": {
                    "description": "Sensor which will list all the processes",
                    "data_type": "string",
                    "required": true,
                    "default": "Process Details",
                    "order": 0
                },
                "group_name": {
                    "description": "Computer group name of which the processes will be listed",
                    "data_type": "string",
                    "order": 1
                },
                "timeout_seconds": {
                    "description": "The number of seconds before the question expires",
                    "data_type": "numeric",
                    "required": true,
                    "default": 600,
                    "order": 2
                }
            },
            "output": [
                {
                    "data_path": "action_result.status",
                    "data_type": "string",
                    "column_name": "Status",
                    "column_order": 0,
                    "example_values": [
                        "success",
                        "failed"
                    ]
                },
                {
                    "data_path": "action_result.parameter.group_name",
                    "data_type": "string",
                    "example_values": [
                        "tanium-01"
                    ]
                },
                {
                    "data_path": "action_result.parameter.sensor",
                    "data_type": "string",
                    "example_values": [
                        "Running Processes With User"
                    ]
                },
                {
                    "data_path": "action_result.parameter.timeout_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        60
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.max_available_age",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.data.now",
                    "data_type": "string",
                    "example_values": [
                        "2019/07/24 11:43:42 GMT-0000"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.age",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.archived_question_id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ],
                    "contains": [
                        "taniumrest question id"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.cache_id",
                    "data_type": "string",
                    "example_values": [
                        "12418149"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.columns.*.hash",
                    "data_type": "numeric",
                    "example_values": [
                        3744593586
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.columns.*.name",
                    "data_type": "string",
                    "example_values": [
                        "Process"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.columns.*.type",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.error_count",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.estimated_total",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.expiration",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.filtered_row_count",
                    "data_type": "numeric",
                    "example_values": [
                        35
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.filtered_row_count_machines",
                    "data_type": "numeric",
                    "example_values": [
                        53
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        58456
                    ],
                    "contains": [
                        "taniumrest question id"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.issue_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.item_count",
                    "data_type": "numeric",
                    "example_values": [
                        35
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.mr_passed",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.mr_tested",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.no_results_count",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.passed",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.question_id",
                    "data_type": "numeric",
                    "example_values": [
                        58456
                    ],
                    "contains": [
                        "taniumrest question id"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.report_count",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.row_count",
                    "data_type": "numeric",
                    "example_values": [
                        35
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.row_count_machines",
                    "data_type": "numeric",
                    "example_values": [
                        53
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.rows.*.cid",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.rows.*.data.*.text",
                    "data_type": "string",
                    "example_values": [
                        "TaniumModuleServer.exe"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.rows.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        58783672
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.saved_question_id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.seconds_since_issued",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.select_count",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.tested",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.summary.num_results",
                    "data_type": "numeric",
                    "example_values": [
                        864
                    ]
                },
                {
                    "data_path": "action_result.summary.timeout_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        10
                    ]
                },
                {
                    "data_path": "action_result.message",
                    "data_type": "string",
                    "example_values": [
                        "Num results: 864"
                    ]
                },
                {
                    "data_path": "summary.total_objects",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "summary.total_objects_successful",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                }
            ],
            "render": {
                "type": "custom",
                "width": 10,
                "height": 10,
                "view": "taniumrest_view.display_invoke"
            },
            "versions": "EQ(*)"
        },
        {
            "action": "parse question",
            "description": "Parses the supplied text into a valid Tanium query string",
            "verbose": "<p>When asked a non-saved question in the <b>query_text</b> parameter, it will parse the given query and give a list of suggestions that are related to it.</p><p>For example, on the Tanium platform, if one were to just ask the question, 'all IP addresses,' Tanium will give the suggestions:<br><ul><li>Get Static IP Addresses from all machines</li><li>Get IP Routes from all machines</li><li>Get IP Address from all machines</li><li>Get IP Connections from all machines</li><li>Get IP Route Details from all machines</li><li>Get Network IP Gateway from all machines</li></ul><br>Tanium sorts this list, from most-related to least-related.</p>",
            "type": "investigate",
            "identifier": "parse_question",
            "read_only": true,
            "parameters": {
                "query_text": {
                    "description": "Query text to parse",
                    "data_type": "string",
                    "required": true,
                    "primary": true,
                    "order": 0,
                    "contains": [
                        "taniumrest question text"
                    ]
                }
            },
            "output": [
                {
                    "data_path": "action_result.status",
                    "data_type": "string",
                    "example_values": [
                        "success",
                        "failed"
                    ]
                },
                {
                    "data_path": "action_result.parameter.query_text",
                    "data_type": "string",
                    "example_values": [
                        "processes"
                    ],
                    "contains": [
                        "taniumrest question text"
                    ]
                },
                {
                    "data_path": "action_result.data.*.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        600
                    ]
                },
                {
                    "data_path": "action_result.data.*.force_computer_id_flag",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.from_canonical_text",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.group",
                    "data_type": "string",
                    "example_values": [
                        "{ group id object }"
                    ],
                    "contains": [
                        "taniumrest group definition"
                    ]
                },
                {
                    "data_path": "action_result.data.*.question_text",
                    "data_type": "string",
                    "example_values": [
                        "Get Child Processes from all machines"
                    ],
                    "contains": [
                        "taniumrest question text"
                    ],
                    "column_name": "Parsed Question",
                    "column_order": 0
                },
                {
                    "data_path": "action_result.data.*.score",
                    "data_type": "numeric",
                    "example_values": [
                        7082
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.all_values_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.delimiter",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.delimiter_index",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.ignore_case_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.max_age_seconds",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.not_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.operator",
                    "data_type": "string",
                    "example_values": [
                        "RegexMatch"
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.substring_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.substring_length",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.substring_start",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.value",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.selects.*.filter.value_type",
                    "data_type": "string",
                    "example_values": [
                        "String"
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.sensor.delimiter",
                    "data_type": "string",
                    "example_values": [
                        ","
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.sensor.hash",
                    "data_type": "numeric",
                    "example_values": [
                        3867657808
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.sensor.id",
                    "data_type": "numeric",
                    "example_values": [
                        350
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.sensor.max_age_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        86400
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.sensor.name",
                    "data_type": "string",
                    "example_values": [
                        "Child Processes"
                    ]
                },
                {
                    "data_path": "action_result.data.*.selects.*.sensor.parameter_definition",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.selects.*.sensor.value_type",
                    "data_type": "string",
                    "example_values": [
                        "String"
                    ]
                },
                {
                    "data_path": "action_result.data.*.sensor_references.*.name",
                    "data_type": "string",
                    "example_values": [
                        "Child Processes"
                    ]
                },
                {
                    "data_path": "action_result.data.*.sensor_references.*.real_ms_avg",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.sensor_references.*.start_char",
                    "data_type": "numeric",
                    "example_values": [
                        4
                    ]
                },
                {
                    "data_path": "action_result.data.*.skip_lock_flag",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.summary.number_of_parsed_questions",
                    "data_type": "numeric",
                    "example_values": [
                        7
                    ]
                },
                {
                    "data_path": "action_result.message",
                    "data_type": "string",
                    "example_values": [
                        "Num parsed questions: 7"
                    ]
                },
                {
                    "data_path": "summary.total_objects",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "summary.total_objects_successful",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                }
            ],
            "render": {
                "type": "table"
            },
            "versions": "EQ(*)"
        },
        {
            "action": "list questions",
            "description": "Retrieves either a history of the most recent questions or a list of saved questions",
            "verbose": "If the <b>list_saved_questions</b> parameter is true, this action will return a list of saved questions. If the flag is not set, this action will return the history of recently asked questions. As pagination is not implemented, the result(s) of the action will be the result(s) that are fetched in a single API call.",
            "type": "investigate",
            "identifier": "list_questions",
            "read_only": true,
            "parameters": {
                "list_saved_questions": {
                    "description": "Retrieve Saved Questions",
                    "data_type": "boolean",
                    "default": true,
                    "order": 0
                }
            },
            "output": [
                {
                    "data_path": "action_result.status",
                    "data_type": "string",
                    "example_values": [
                        "success",
                        "failed"
                    ]
                },
                {
                    "data_path": "action_result.parameter.list_saved_questions",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.action_tracking_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.archive_enabled_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.archive_owner",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.archive_owner.id",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.archive_owner.name",
                    "data_type": "string",
                    "example_values": [
                        "administrator"
                    ]
                },
                {
                    "data_path": "action_result.data.*.content_set.id",
                    "data_type": "numeric",
                    "example_values": [
                        7
                    ]
                },
                {
                    "data_path": "action_result.data.*.content_set.name",
                    "data_type": "string",
                    "example_values": [
                        "Detect Service"
                    ]
                },
                {
                    "data_path": "action_result.data.*.context_group.id",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.expiration",
                    "data_type": "string",
                    "example_values": [
                        "2001-01-01T00:00:00Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        600
                    ]
                },
                {
                    "data_path": "action_result.data.*.hidden_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        26
                    ],
                    "contains": [
                        "taniumrest question id"
                    ],
                    "column_name": "Question ID",
                    "column_order": 0
                },
                {
                    "data_path": "action_result.data.*.is_expired",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.issue_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        300
                    ]
                },
                {
                    "data_path": "action_result.data.*.issue_seconds_never_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.keep_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.management_rights_group.id",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.metadata.*.admin_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.metadata.*.name",
                    "data_type": "string",
                    "example_values": [
                        "SQPreference_Default"
                    ]
                },
                {
                    "data_path": "action_result.data.*.metadata.*.value",
                    "data_type": "string",
                    "example_values": [
                        "{\"default_grid_zoom_level\":0,\"default_line_zoom_level\":12,\"default_tab\":1,\"merge_flag\":0,\"drilldown_flag\":0}"
                    ]
                },
                {
                    "data_path": "action_result.data.*.mod_time",
                    "data_type": "string",
                    "example_values": [
                        "2019-02-11T21:22:25Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.mod_user.display_name",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.mod_user.domain",
                    "data_type": "string",
                    "contains": [
                        "domain"
                    ]
                },
                {
                    "data_path": "action_result.data.*.mod_user.id",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.mod_user.name",
                    "data_type": "string",
                    "example_values": [
                        "administrator"
                    ]
                },
                {
                    "data_path": "action_result.data.*.most_recent_question_id",
                    "data_type": "numeric",
                    "example_values": [
                        56071
                    ],
                    "contains": [
                        "taniumrest question id"
                    ]
                },
                {
                    "data_path": "action_result.data.*.name",
                    "data_type": "string",
                    "example_values": [
                        "Detect Managed Unix Endpoints"
                    ],
                    "column_name": "Question Name",
                    "column_order": 1
                },
                {
                    "data_path": "action_result.data.*.packages.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.packages.*.name",
                    "data_type": "string",
                    "example_values": [
                        "Distribute Tanium Standard Utilities"
                    ]
                },
                {
                    "data_path": "action_result.data.*.public_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.query_text",
                    "data_type": "string",
                    "example_values": [
                        "Get Detect Tools Status from all machines with ( Detect Tools Status contains engine version and Detect Tools Status contains Unix )"
                    ],
                    "contains": [
                        "taniumrest question text"
                    ],
                    "column_name": "Question Text",
                    "column_order": 2
                },
                {
                    "data_path": "action_result.data.*.question.id",
                    "data_type": "numeric",
                    "example_values": [
                        56071
                    ],
                    "contains": [
                        "taniumrest question id"
                    ]
                },
                {
                    "data_path": "action_result.data.*.row_count_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.saved_question.id",
                    "data_type": "numeric",
                    "example_values": [
                        15
                    ]
                },
                {
                    "data_path": "action_result.data.*.skip_lock_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.sort_column",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.user.deleted_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.user.id",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.user.name",
                    "data_type": "string",
                    "example_values": [
                        "administrator"
                    ]
                },
                {
                    "data_path": "action_result.summary.num_questions",
                    "data_type": "numeric",
                    "example_values": [
                        818
                    ]
                },
                {
                    "data_path": "action_result.summary.num_saved_questions",
                    "data_type": "numeric",
                    "example_values": [
                        32
                    ]
                },
                {
                    "data_path": "action_result.message",
                    "data_type": "string",
                    "example_values": [
                        "Num saved questions: 32"
                    ]
                },
                {
                    "data_path": "summary.total_objects",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "summary.total_objects_successful",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                }
            ],
            "render": {
                "type": "table"
            },
            "versions": "EQ(*)"
        },
        {
            "action": "terminate process",
            "description": "Kill a running process of the devices registered on the Tanium server",
            "type": "generic",
            "identifier": "terminate_process",
            "read_only": false,
            "parameters": {
                "action_name": {
                    "description": "Name of the action",
                    "data_type": "string",
                    "required": true,
                    "order": 0
                },
                "action_group": {
                    "description": "Group of the action",
                    "data_type": "string",
                    "required": true,
                    "order": 1
                },
                "package_name": {
                    "description": "Package name that will be executed",
                    "data_type": "string",
                    "required": true,
                    "order": 2
                },
                "package_parameters": {
                    "description": "Package parameters of the corresponding package",
                    "data_type": "string",
                    "order": 3
                },
                "group_name": {
                    "description": "Computer group name of which the process will be terminated",
                    "data_type": "string",
                    "order": 4
                },
                "distribute_seconds": {
                    "description": "The number of seconds over which to deploy the action",
                    "data_type": "numeric",
                    "order": 5
                },
                "issue_seconds": {
                    "description": "The number of seconds to reissue an action from the saved action",
                    "data_type": "numeric",
                    "order": 6
                },
                "expire_seconds": {
                    "description": "The duration from the start time before the action expires",
                    "data_type": "numeric",
                    "required": true,
                    "default": 600,
                    "order": 7
                }
            },
            "output": [
                {
                    "data_path": "action_result.status",
                    "data_type": "string",
                    "example_values": [
                        "success",
                        "failed"
                    ],
                    "column_name": "Status",
                    "column_order": 0
                },
                {
                    "data_path": "action_result.parameter.action_group",
                    "data_type": "string",
                    "example_values": [
                        "Default"
                    ]
                },
                {
                    "data_path": "action_result.parameter.action_name",
                    "data_type": "string",
                    "example_values": [
                        "test terminate process"
                    ]
                },
                {
                    "data_path": "action_result.parameter.distribute_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        60
                    ]
                },
                {
                    "data_path": "action_result.parameter.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        600
                    ]
                },
                {
                    "data_path": "action_result.parameter.group_name",
                    "data_type": "string",
                    "example_values": [
                        "tanium-01"
                    ]
                },
                {
                    "data_path": "action_result.parameter.issue_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        30
                    ]
                },
                {
                    "data_path": "action_result.parameter.package_name",
                    "data_type": "string",
                    "example_values": [
                        "terminate process"
                    ]
                },
                {
                    "data_path": "action_result.parameter.package_parameters",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.action_group_id",
                    "data_type": "numeric",
                    "example_values": [
                        151
                    ]
                },
                {
                    "data_path": "action_result.data.*.approved_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.approver.id",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.approver.name",
                    "data_type": "string",
                    "example_values": [
                        "administrator"
                    ]
                },
                {
                    "data_path": "action_result.data.*.comment",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.creation_time",
                    "data_type": "string",
                    "example_values": [
                        "2019-09-18T04:53:58Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.distribute_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ],
                    "column_name": "Distribute Seconds",
                    "column_order": 6
                },
                {
                    "data_path": "action_result.data.*.end_time",
                    "data_type": "string",
                    "example_values": [
                        "Never"
                    ],
                    "column_name": "End Time",
                    "column_order": 7
                },
                {
                    "data_path": "action_result.data.*.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        600
                    ],
                    "column_name": "Expire Seconds",
                    "column_order": 3
                },
                {
                    "data_path": "action_result.data.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        523
                    ]
                },
                {
                    "data_path": "action_result.data.*.issue_count",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.issue_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ],
                    "column_name": "Issue Seconds",
                    "column_order": 5
                },
                {
                    "data_path": "action_result.data.*.last_action.id",
                    "data_type": "numeric",
                    "example_values": [
                        272936
                    ],
                    "column_name": "Action ID",
                    "column_order": 1
                },
                {
                    "data_path": "action_result.data.*.last_action.start_time",
                    "data_type": "string",
                    "example_values": [
                        "Never"
                    ]
                },
                {
                    "data_path": "action_result.data.*.last_action.target_group.id",
                    "data_type": "numeric",
                    "example_values": [
                        3646
                    ]
                },
                {
                    "data_path": "action_result.data.*.last_start_time",
                    "data_type": "string",
                    "example_values": [
                        "Never"
                    ]
                },
                {
                    "data_path": "action_result.data.*.name",
                    "data_type": "string",
                    "example_values": [
                        "test terminate process"
                    ],
                    "column_name": "Name",
                    "column_order": 2
                },
                {
                    "data_path": "action_result.data.*.next_start_time",
                    "data_type": "string",
                    "example_values": [
                        "Never"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.available_time",
                    "data_type": "string",
                    "example_values": [
                        "2001-01-01T00:00:00Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.command",
                    "data_type": "string",
                    "example_values": [
                        "cmd /c mkdir C:\\Users\\Administrator\\some_dir\\"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.command_timeout",
                    "data_type": "numeric",
                    "example_values": [
                        600
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.content_set.id",
                    "data_type": "numeric",
                    "example_values": [
                        9
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.content_set.name",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.creation_time",
                    "data_type": "string",
                    "example_values": [
                        "2001-01-01T00:00:00Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.deleted_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.display_name",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        3600
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.bytes_downloaded",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.bytes_total",
                    "data_type": "numeric",
                    "example_values": [
                        39221
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.cache_status",
                    "data_type": "string",
                    "example_values": [
                        "Cached"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.download_seconds",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.download_start_time",
                    "data_type": "string",
                    "example_values": [
                        "2021-11-16T18:53:31Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.hash",
                    "data_type": "string",
                    "example_values": [
                        "b6c7534b828ff6e28f1467041a6f6f9a5ad7a7f4ac367c5425f16e249c77ec30"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        73
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.last_download_progress_time",
                    "data_type": "string",
                    "example_values": [
                        "2021-11-16T18:53:31Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.name",
                    "data_type": "string",
                    "example_values": [
                        "clean-stale-tanium-client-data.vbs"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.size",
                    "data_type": "numeric",
                    "example_values": [
                        39221
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.source",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.status",
                    "data_type": "numeric",
                    "example_values": [
                        200
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.hidden_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.id",
                    "data_type": "numeric",
                    "example_values": [
                        600
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.last_modified_by",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.last_update",
                    "data_type": "string",
                    "example_values": [
                        "2019-09-18T04:53:58Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.mod_user.display_name",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.mod_user.domain",
                    "data_type": "string",
                    "contains": [
                        "domain"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.mod_user.id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.mod_user.name",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.modification_time",
                    "data_type": "string",
                    "example_values": [
                        "2001-01-01T00:00:00Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.name",
                    "data_type": "string",
                    "example_values": [
                        "terminate process"
                    ],
                    "column_name": "Package Name",
                    "column_order": 9
                },
                {
                    "data_path": "action_result.data.*.package_spec.process_group_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.skip_lock_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.source_hash",
                    "data_type": "string",
                    "example_values": [
                        "b75af868db6d80c0e603ce8827146e2e44f2728c6ae98fd6082003412cf3a207"
                    ],
                    "contains": [
                        "sha256"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.source_hash_changed_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.source_id",
                    "data_type": "numeric",
                    "example_values": [
                        221
                    ],
                    "column_name": "Package ID",
                    "column_order": 8
                },
                {
                    "data_path": "action_result.data.*.package_spec.verify_expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        3600
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.verify_group.id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.verify_group_id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.policy_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.public_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.start_now_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.start_time",
                    "data_type": "string",
                    "example_values": [
                        "2019-09-18T04:53:58Z"
                    ],
                    "column_name": "Start Time",
                    "column_order": 4
                },
                {
                    "data_path": "action_result.data.*.status",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.target_group.id",
                    "data_type": "numeric",
                    "example_values": [
                        3646
                    ]
                },
                {
                    "data_path": "action_result.data.*.user.id",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.user.name",
                    "data_type": "string",
                    "example_values": [
                        "administrator"
                    ]
                },
                {
                    "data_path": "action_result.data.*.user_start_time",
                    "data_type": "string",
                    "example_values": [
                        "2001-01-01T00:00:00Z"
                    ]
                },
                {
                    "data_path": "action_result.summary",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.message",
                    "data_type": "string",
                    "example_values": [
                        "Successfully executed the action"
                    ]
                },
                {
                    "data_path": "summary.total_objects",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "summary.total_objects_successful",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                }
            ],
            "render": {
                "type": "table"
            },
            "versions": "EQ(*)"
        },
        {
            "action": "execute action",
            "description": "Execute an action on the Tanium server",
            "verbose": "<li>See top-level app documentation for example parameters.</li><li>If a parameterized package is used for executing an action all the parameters must be provided with correct and unique keys. If any key is repeated then the value of that key will be overwritten.</li><li>If the <b>issue_seconds</b> parameter is provided, then the action will respawn after a time interval provided in the <b>issue_seconds</b> parameter.</li>",
            "type": "generic",
            "identifier": "execute_action",
            "read_only": false,
            "parameters": {
                "action_name": {
                    "description": "Creates a name for the action executed",
                    "data_type": "string",
                    "required": true,
                    "order": 0
                },
                "action_group": {
                    "description": "Group of the action",
                    "data_type": "string",
                    "default": "Default",
                    "required": true,
                    "order": 1
                },
                "package_name": {
                    "description": "Name of the Tanium package to be executed",
                    "data_type": "string",
                    "required": true,
                    "order": 2
                },
                "package_parameters": {
                    "description": "Parameter inputs of the corresponding package. Provide JSON format (i.e. {\"$1\": \"Standard_Collection\", \"$2\": \"SCP\"})",
                    "data_type": "string",
                    "order": 3
                },
                "group_name": {
                    "description": "The Tanium Computer Group name on which the action will be executed. If left blank, will execute on all registered IP addresses/hostnames in your Tanium instance",
                    "data_type": "string",
                    "order": 4,
                    "contains": [
                        "taniumrest group definition"
                    ],
                    "primary": true
                },
                "distribute_seconds": {
                    "description": "The number of seconds over which to deploy the action",
                    "data_type": "numeric",
                    "order": 5
                },
                "issue_seconds": {
                    "description": "The number of seconds to reissue an action from the saved action",
                    "data_type": "numeric",
                    "order": 6
                },
                "expire_seconds": {
                    "description": "The duration from the start time before the action expires",
                    "data_type": "numeric",
                    "required": true,
                    "default": 600,
                    "order": 7
                }
            },
            "output": [
                {
                    "data_path": "action_result.status",
                    "data_type": "string",
                    "example_values": [
                        "success",
                        "failed"
                    ],
                    "column_name": "Status",
                    "column_order": 0
                },
                {
                    "data_path": "action_result.parameter.action_group",
                    "data_type": "string",
                    "example_values": [
                        "Default"
                    ]
                },
                {
                    "data_path": "action_result.parameter.action_name",
                    "data_type": "string",
                    "example_values": [
                        "test action start 7"
                    ]
                },
                {
                    "data_path": "action_result.parameter.distribute_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        60
                    ]
                },
                {
                    "data_path": "action_result.parameter.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        600
                    ]
                },
                {
                    "data_path": "action_result.parameter.group_name",
                    "data_type": "string",
                    "contains": [
                        "taniumrest group definition"
                    ],
                    "example_values": [
                        "tanium-01"
                    ]
                },
                {
                    "data_path": "action_result.parameter.issue_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        30
                    ]
                },
                {
                    "data_path": "action_result.parameter.package_name",
                    "data_type": "string",
                    "example_values": [
                        "make directory"
                    ]
                },
                {
                    "data_path": "action_result.parameter.package_parameters",
                    "data_type": "string",
                    "example_values": [
                        "{\"$1\": \"TestDirectory\"}"
                    ]
                },
                {
                    "data_path": "action_result.data.*.action_group_id",
                    "data_type": "numeric",
                    "example_values": [
                        151
                    ]
                },
                {
                    "data_path": "action_result.data.*.approved_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.approver.id",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.approver.name",
                    "data_type": "string",
                    "example_values": [
                        "administrator"
                    ]
                },
                {
                    "data_path": "action_result.data.*.comment",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.creation_time",
                    "data_type": "string",
                    "example_values": [
                        "2019-09-16T07:43:57Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.distribute_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ],
                    "column_name": "Distribute Seconds",
                    "column_order": 6
                },
                {
                    "data_path": "action_result.data.*.end_time",
                    "data_type": "string",
                    "example_values": [
                        "Never"
                    ],
                    "column_name": "End Time",
                    "column_order": 7
                },
                {
                    "data_path": "action_result.data.*.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        600
                    ],
                    "column_name": "Expire Seconds",
                    "column_order": 3
                },
                {
                    "data_path": "action_result.data.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        482
                    ],
                    "contains": [
                        "taniumrest question id"
                    ],
                    "column_name": "Action ID",
                    "column_order": 1
                },
                {
                    "data_path": "action_result.data.*.issue_count",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.issue_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ],
                    "column_name": "Issue Seconds",
                    "column_order": 5
                },
                {
                    "data_path": "action_result.data.*.last_action.id",
                    "data_type": "numeric",
                    "example_values": [
                        272568
                    ]
                },
                {
                    "data_path": "action_result.data.*.last_action.start_time",
                    "data_type": "string",
                    "example_values": [
                        "Never"
                    ]
                },
                {
                    "data_path": "action_result.data.*.last_action.target_group.id",
                    "data_type": "numeric",
                    "example_values": [
                        3614
                    ]
                },
                {
                    "data_path": "action_result.data.*.last_start_time",
                    "data_type": "string",
                    "example_values": [
                        "Never"
                    ]
                },
                {
                    "data_path": "action_result.data.*.name",
                    "data_type": "string",
                    "example_values": [
                        "test action start 7"
                    ],
                    "column_name": "Name",
                    "column_order": 2
                },
                {
                    "data_path": "action_result.data.*.next_start_time",
                    "data_type": "string",
                    "example_values": [
                        "Never"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.available_time",
                    "data_type": "string",
                    "example_values": [
                        "2001-01-01T00:00:00Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.command",
                    "data_type": "string",
                    "example_values": [
                        "cmd /c mkdir C:\\Users\\Administrator\\test123\\\"TestDirectory\""
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.command_timeout",
                    "data_type": "numeric",
                    "example_values": [
                        600
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.content_set.id",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.content_set.name",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.creation_time",
                    "data_type": "string",
                    "example_values": [
                        "2001-01-01T00:00:00Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.deleted_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.display_name",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        3600
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.bytes_downloaded",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.bytes_total",
                    "data_type": "numeric",
                    "example_values": [
                        39221
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.cache_status",
                    "data_type": "string",
                    "example_values": [
                        "Cached"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.download_seconds",
                    "data_type": "numeric"
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.download_start_time",
                    "data_type": "string",
                    "example_values": [
                        "2021-11-16T18:53:31Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.hash",
                    "data_type": "string",
                    "example_values": [
                        "b6c7534b828ff6e28f1467041a6f6f9a5ad7a7f4ac367c5425f16e249c77ec30"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        73
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.last_download_progress_time",
                    "data_type": "string",
                    "example_values": [
                        "2021-11-16T18:53:31Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.name",
                    "data_type": "string",
                    "example_values": [
                        "clean-stale-tanium-client-data.vbs"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.size",
                    "data_type": "numeric",
                    "example_values": [
                        39221
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.source",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.files.*.status",
                    "data_type": "numeric",
                    "example_values": [
                        200
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.hidden_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.id",
                    "data_type": "numeric",
                    "example_values": [
                        559
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.last_modified_by",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.last_update",
                    "data_type": "string",
                    "example_values": [
                        "2019-09-16T07:43:57Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.mod_user.display_name",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.mod_user.domain",
                    "data_type": "string",
                    "contains": [
                        "domain"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.mod_user.id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.mod_user.name",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.modification_time",
                    "data_type": "string",
                    "example_values": [
                        "2001-01-01T00:00:00Z"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.name",
                    "data_type": "string",
                    "example_values": [
                        "make directory"
                    ],
                    "column_name": "Package Name",
                    "column_order": 9
                },
                {
                    "data_path": "action_result.data.*.package_spec.parameter_definition",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.package_spec.parameters.*.key",
                    "data_type": "string",
                    "example_values": [
                        "$1"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.parameters.*.type",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.parameters.*.value",
                    "data_type": "string",
                    "example_values": [
                        "TestDirectory"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.process_group_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.skip_lock_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.source_hash",
                    "data_type": "string",
                    "example_values": [
                        "d36e609e026380ce117388858503384ecd50f8fb9321ccaeab9647b4131cc7a7"
                    ],
                    "contains": [
                        "sha256"
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.source_hash_changed_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.source_id",
                    "data_type": "numeric",
                    "example_values": [
                        500
                    ],
                    "column_name": "Package ID",
                    "column_order": 8
                },
                {
                    "data_path": "action_result.data.*.package_spec.verify_expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        3600
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.verify_group.id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.package_spec.verify_group_id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.policy_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.public_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.start_now_flag",
                    "data_type": "boolean",
                    "example_values": [
                        true,
                        false
                    ]
                },
                {
                    "data_path": "action_result.data.*.start_time",
                    "data_type": "string",
                    "example_values": [
                        "2019-09-16T07:43:57Z"
                    ],
                    "column_name": "Start Time",
                    "column_order": 4
                },
                {
                    "data_path": "action_result.data.*.status",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.target_group.id",
                    "data_type": "numeric",
                    "example_values": [
                        3614
                    ]
                },
                {
                    "data_path": "action_result.data.*.user.id",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.user.name",
                    "data_type": "string",
                    "example_values": [
                        "administrator"
                    ]
                },
                {
                    "data_path": "action_result.data.*.user_start_time",
                    "data_type": "string",
                    "example_values": [
                        "2001-01-01T00:00:00Z"
                    ]
                },
                {
                    "data_path": "action_result.summary",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.message",
                    "data_type": "string",
                    "example_values": [
                        "Successfully executed the action"
                    ]
                },
                {
                    "data_path": "summary.total_objects",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "summary.total_objects_successful",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                }
            ],
            "render": {
                "type": "table"
            },
            "versions": "EQ(*)"
        },
        {
            "action": "run query",
            "description": "Run a search query on the devices registered on the Tanium server",
            "verbose": "See top-level app documentation for example parameters. For manual questions only, the action waits for <b>timeout_seconds</b> provided by the user in intervals of 5 seconds to fetch the results. The action is a success as soon as the results are retrieved or else it will timeout and fail. As pagination is not implemented, the result(s) of the action will be the result(s) that are fetched in a single API call. If an endpoint takes longer than usual to evaluate a sensor, it might initially supply the answer[current results unavailable] to the answer message that it passes along the linear chain and ultimately to the Tanium Server. However, the sensor process continues on the endpoint after supplying that initial answer and, upon completing the process, the endpoint sends its updated answer. Reference Link: ~https://docs.tanium.com/interact/interact/results.html.",
            "type": "investigate",
            "identifier": "run_query",
            "read_only": true,
            "lock": {
                "enabled": false
            },
            "parameters": {
                "query_text": {
                    "description": "Query to run (in Tanium Question Syntax)",
                    "data_type": "string",
                    "contains": [
                        "taniumrest question text"
                    ],
                    "primary": true,
                    "required": true,
                    "order": 0
                },
                "group_name": {
                    "description": "The Tanium Computer Group name on which the query will be executed (manual query only)",
                    "data_type": "string",
                    "order": 1
                },
                "is_saved_question": {
                    "description": "Check this box if the query text parameter refers to a 'Saved Question' on your Tanium",
                    "data_type": "boolean",
                    "default": false,
                    "order": 2
                },
                "timeout_seconds": {
                    "description": "The number of seconds before the question expires (manual query only)",
                    "data_type": "numeric",
                    "required": true,
                    "default": 600,
                    "order": 3
                },
                "wait_for_results_processing": {
                    "description": "Flag to wait for endpoint to return full results",
                    "data_type": "boolean",
                    "default": false,
                    "order": 4
                },
                "return_when_n_results_available": {
                    "description": "Return results as soon as 'n' answers are available",
                    "data_type": "numeric",
                    "order": 5
                },
                "wait_for_n_results_available": {
                    "description": "Wait until 'n' results are present, even if hit the percent complete threshold",
                    "data_type": "numeric",
                    "order": 6
                }
            },
            "output": [
                {
                    "data_path": "action_result.status",
                    "data_type": "string",
                    "example_values": [
                        "success",
                        "failed"
                    ]
                },
                {
                    "data_path": "action_result.parameter.group_name",
                    "data_type": "string",
                    "example_values": [
                        "tanium-01"
                    ]
                },
                {
                    "data_path": "action_result.parameter.is_saved_question",
                    "data_type": "boolean",
                    "example_values": [
                        false,
                        true
                    ]
                },
                {
                    "data_path": "action_result.parameter.query_text",
                    "data_type": "string",
                    "contains": [
                        "taniumrest question text"
                    ],
                    "example_values": [
                        "Computer name"
                    ]
                },
                {
                    "data_path": "action_result.parameter.return_when_n_results_available",
                    "data_type": "numeric",
                    "example_values": [
                        10
                    ]
                },
                {
                    "data_path": "action_result.parameter.timeout_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        600
                    ]
                },
                {
                    "data_path": "action_result.parameter.wait_for_n_results_available",
                    "data_type": "numeric",
                    "example_values": [
                        10
                    ]
                },
                {
                    "data_path": "action_result.parameter.wait_for_results_processing",
                    "data_type": "boolean",
                    "example_values": [
                        false,
                        true
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.max_available_age",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.data.now",
                    "data_type": "string",
                    "example_values": [
                        "2019/07/24 07:53:06 GMT-0000"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.age",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.archived_question_id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.cache_id",
                    "data_type": "string",
                    "example_values": [
                        "2668614289"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.columns.*.hash",
                    "data_type": "numeric",
                    "example_values": [
                        3112892791
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.columns.*.name",
                    "data_type": "string",
                    "example_values": [
                        "DNS Server"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.columns.*.type",
                    "data_type": "numeric",
                    "example_values": [
                        5
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.error_count",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.estimated_total",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.expiration",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.filtered_row_count",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.filtered_row_count_machines",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        58377
                    ],
                    "contains": [
                        "taniumrest question id"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.issue_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.item_count",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.mr_passed",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.mr_tested",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.no_results_count",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.passed",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.question_id",
                    "data_type": "numeric",
                    "example_values": [
                        58377
                    ],
                    "contains": [
                        "taniumrest question id"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.report_count",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.row_count",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.row_count_machines",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.rows.*.cid",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.rows.*.data.*.text",
                    "data_type": "string",
                    "example_values": [
                        "10.1.16.5"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.rows.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        1306085003
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.saved_question_id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.seconds_since_issued",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.select_count",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.tested",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.summary.number_of_rows",
                    "data_type": "numeric",
                    "example_values": [
                        3
                    ]
                },
                {
                    "data_path": "action_result.summary.timeout_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        10
                    ]
                },
                {
                    "data_path": "action_result.message",
                    "data_type": "string",
                    "example_values": [
                        "Number of rows: 3"
                    ]
                },
                {
                    "data_path": "summary.total_objects",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "summary.total_objects_successful",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                }
            ],
            "render": {
                "type": "custom",
                "width": 10,
                "height": 10,
                "view": "taniumrest_view.display_invoke"
            },
            "versions": "EQ(*)"
        },
        {
            "action": "get question results",
            "description": "Return the results for an already asked question",
            "type": "investigate",
            "identifier": "get_question_results",
            "read_only": true,
            "lock": {
                "enabled": false
            },
            "parameters": {
                "question_id": {
                    "description": "The ID of the question",
                    "data_type": "numeric",
                    "contains": [
                        "taniumrest question id"
                    ],
                    "primary": true,
                    "required": true,
                    "order": 0
                }
            },
            "output": [
                {
                    "data_path": "action_result.status",
                    "data_type": "string",
                    "example_values": [
                        "success",
                        "failed"
                    ]
                },
                {
                    "data_path": "action_result.parameter.question_id",
                    "data_type": "numeric",
                    "example_values": [
                        11111111
                    ],
                    "contains": [
                        "taniumrest question id"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.max_available_age",
                    "data_type": "string"
                },
                {
                    "data_path": "action_result.data.*.data.now",
                    "data_type": "string",
                    "example_values": [
                        "2019/07/24 07:53:06 GMT-0000"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.age",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.archived_question_id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.cache_id",
                    "data_type": "string",
                    "example_values": [
                        "2668614289"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.columns.*.hash",
                    "data_type": "numeric",
                    "example_values": [
                        3112892791
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.columns.*.name",
                    "data_type": "string",
                    "example_values": [
                        "DNS Server"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.columns.*.type",
                    "data_type": "numeric",
                    "example_values": [
                        5
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.error_count",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.estimated_total",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.expiration",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.expire_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.filtered_row_count",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.filtered_row_count_machines",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        58377
                    ],
                    "contains": [
                        "taniumrest question id"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.issue_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.item_count",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.mr_passed",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.mr_tested",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.no_results_count",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.passed",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.question_id",
                    "data_type": "numeric",
                    "example_values": [
                        58377
                    ],
                    "contains": [
                        "taniumrest question id"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.report_count",
                    "data_type": "numeric",
                    "example_values": [
                        2
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.row_count",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.row_count_machines",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.rows.*.cid",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.rows.*.data.*.*.text",
                    "data_type": "string",
                    "example_values": [
                        "test"
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.rows.*.id",
                    "data_type": "numeric",
                    "example_values": [
                        1306085003
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.saved_question_id",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.seconds_since_issued",
                    "data_type": "numeric",
                    "example_values": [
                        0
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.select_count",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.data.*.data.result_sets.*.tested",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "action_result.summary.number_of_rows",
                    "data_type": "numeric",
                    "example_values": [
                        3
                    ]
                },
                {
                    "data_path": "action_result.summary.timeout_seconds",
                    "data_type": "numeric",
                    "example_values": [
                        10
                    ]
                },
                {
                    "data_path": "action_result.message",
                    "data_type": "string",
                    "example_values": [
                        "Number of rows: 3"
                    ]
                },
                {
                    "data_path": "summary.total_objects",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                },
                {
                    "data_path": "summary.total_objects_successful",
                    "data_type": "numeric",
                    "example_values": [
                        1
                    ]
                }
            ],
            "render": {
                "type": "custom",
                "width": 10,
                "height": 10,
                "view": "taniumrest_view.display_invoke"
            },
            "versions": "EQ(*)"
        }
    ],
    "pip_dependencies": {
        "wheel": [
            {
                "module": "beautifulsoup4",
                "input_file": "wheels/py3/beautifulsoup4-4.9.1-py3-none-any.whl"
            },
            {
                "module": "soupsieve",
                "input_file": "wheels/py3/soupsieve-2.3.2.post1-py3-none-any.whl"
            }
        ]
    },
    "pip39_dependencies": {
        "wheel": [
            {
                "module": "beautifulsoup4",
                "input_file": "wheels/py3/beautifulsoup4-4.9.1-py3-none-any.whl"
            },
            {
                "module": "soupsieve",
                "input_file": "wheels/py3/soupsieve-2.5-py3-none-any.whl"
            }
        ]
    }
}