Firewall Management

Using the Firewall Management service collection

Table of Contents

Operation ID	Description
aggregate_events PEP8 aggregate_events	Aggregate events for customer
aggregate_policy_rules PEP8 aggregate_policy_rules	Aggregate rules within a policy for customer
aggregate_rule_groups PEP8 aggregate_rule_groups	Aggregate rule groups for customer
aggregate_rules PEP8 aggregate_rules	Aggregate rules for customer
get_events PEP8 get_events	Get events entities by ID and optionally version
get_firewall_fields PEP8 get_firewall_fields	Get the firewall field specifications by ID
get_platforms PEP8 get_platforms	Get platforms by ID, e.g., windows or mac or droid
get_policy_containers PEP8 get_policy_containers	Get policy container entities by policy ID
update_policy_container PEP8 update_policy_container	Update an identified policy container
get_rule_groups PEP8 get_rule_groups	Get rule group entities by ID. These groups do not contain their rule entites, just the rule IDs in precedence order.
create_rule_group PEP8 create_rule_group	Create new rule group on a platform for a customer with a name and description, and return the ID
delete_rule_groups PEP8 delete_rule_groups	Delete rule group entities by ID
update_rule_group PEP8 update_rule_group	Update name, description, or enabled status of a rule group, or create, edit, delete, or reorder rules
get_rules PEP8 get_rules	Get rule entities by ID (64-bit unsigned int as decimal string) or Family ID (32-character hexadecimal string)
query_events PEP8 query_events	Find all event IDs matching the query with filter
query_firewall_fields PEP8 query_firewall_fields	Get the firewall field specification IDs for the provided platform
query_platforms PEP8 query_platforms	Get the list of platform names
query_policy_rules PEP8 query_policy_rules	Find all firewall rule IDs matching the query with filter, and return them in precedence order
query_rule_groups PEP8 query_rule_groups	Find all rule group IDs matching the query with filter
query_rules PEP8 query_rules	Find all rule IDs matching the query with filter

aggregate_events

Aggregate events for customer

PEP8 method name

aggregate_events

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	body	body	string	Query criteria and settings

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.aggregate_events(body=BODY)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.command("aggregate_events", body=BODY)
print(response)

aggregate_policy_rules

Aggregate rules within a policy for customer

PEP8 method name

aggregate_policy_rules

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	body	body	string	Query criteria and settings

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.aggregate_policy_rules(body=BODY)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.command("aggregate_policy_rules", body=BODY)
print(response)

aggregate_rule_groups

Aggregate rule groups for customer

PEP8 method name

aggregate_rule_groups

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	body	body	string	Query criteria and settings

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.aggregate_rule_groups(body=BODY)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.command("aggregate_rule_groups", body=BODY)
print(response)

aggregate_rules

Aggregate rules for customer

PEP8 method name

aggregate_rules

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	body	body	string	Query criteria and settings

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.aggregate_rules(body=BODY)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.command("aggregate_rules", body=BODY)
print(response)

get_events

Get events entities by ID and optionally version

PEP8 method name

get_events

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	ids	query	array (string)	The events to retrieve, identified by ID

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_events(ids=id_list)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("get_events", ids=id_list)
print(response)

get_firewall_fields

Get the firewall field specifications by ID

PEP8 method name

get_firewall_fields

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	ids	query	array (string)	The IDs of the rule types to retrieve

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_firewall_fields(ids=id_list)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("get_firewall_fields", ids=id_list)
print(response)

get_platforms

Get platforms by ID, e.g., windows or mac or droid

PEP8 method name

get_platforms

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	ids	query	array (string)	The IDs of the platforms to retrieve

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_platforms(ids=id_list)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("get_platforms", ids=id_list)
print(response)

get_policy_containers

Get policy container entities by policy ID

PEP8 method name

get_policy_containers

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	ids	query	array (string)	The policy container(s) to retrieve, identified by policy ID

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_policy_containers(ids=id_list)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("get_policy_containers", ids=id_list)
print(response)

update_policy_container

Update an identified policy container

PEP8 method name

update_policy_container

Content-Type

• Consumes: application/json
• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	body	body	string

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.update_policy_container(body=BODY)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.command("update_policy_container", body=BODY)
print(response)

get_rule_groups

Get rule group entities by ID. These groups do not contain their rule entites, just the rule IDs in precedence order.

PEP8 method name

get_rule_groups

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	ids	query	array (string)	The IDs of the rule groups to retrieve

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_rule_groups(ids=id_list)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("get_rule_groups", ids=id_list)
print(response)

create_rule_group

Create new rule group on a platform for a customer with a name and description, and return the ID

PEP8 method name

create_rule_group

Content-Type

• Consumes: application/json
• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
	clone_id	query	string	A rule group ID from which to copy rules. If this is provided then the 'rules' property of the body is ignored.
	library	query	string	If this flag is set to true then the rules will be cloned from the clone_id from the CrowdStrike Firewal Rule Groups Library.
	comment	query	string	Audit log comment for this action
✅	body	body	string

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.create_rule_group(clone_id="string",
                                    library="string",
                                    comment="string"
                                    , body=BODY)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

PARAMS = {
    "clone_id": "string",
    "library": "string",
    "comment": "string"
}

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.command("create_rule_group", parameters=PARAMS, body=BODY)
print(response)

delete_rule_groups

Delete rule group entities by ID

PEP8 method name

delete_rule_groups

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	ids	query	array (string)	The IDs of the rule groups to be deleted
	comment	query	string	Audit log comment for this action

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.delete_rule_groups(comment="string", ids=id_list)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

PARAMS = {
    "comment": "string"
}

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("delete_rule_groups", parameters=PARAMS, ids=id_list)
print(response)

update_rule_group

Update name, description, or enabled status of a rule group, or create, edit, delete, or reorder rules

PEP8 method name

update_rule_group

Content-Type

• Consumes: application/json
• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
	comment	query	string	Audit log comment for this action
✅	body	body	string

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.update_rule_group(comment="string", body=BODY)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

PARAMS = {
    "comment": "string"
}

BODY = {
    "Body Payload": "See body description above"
}

response = falcon.command("update_rule_group", parameters=PARAMS, body=BODY)
print(response)

get_rules

Get rule entities by ID (64-bit unsigned int as decimal string) or Family ID (32-character hexadecimal string)

PEP8 method name

get_rules

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
✅	ids	query	array (string)	The rules to retrieve, identified by ID

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.get_rules(ids=id_list)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("get_rules", ids=id_list)
print(response)

query_events

Find all event IDs matching the query with filter

PEP8 method name

query_events

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
	sort	query	string	Possible order by fields:
	filter	query	string	FQL query specifying the filter parameters. Filter term criteria: enabled, platform, name, description, etc TODO. Filter range criteria: created_on, modified_on; use any common date format, such as '2010-05-15T14:55:21.892315096Z'.
	q	query	string	Match query criteria, which includes all the filter string fields, plus TODO
	offset	query	string	Starting index of overall result set from which to return ids.
	after	query	string	A pagination token used with the limit parameter to manage pagination of results. On your first request, don't provide an after token. On subsequent requests, provide the after token from the previous response to continue from that place in the results.
	limit	query	integer	Number of ids to return.

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

response = falcon.query_events(sort="string",
                               filter="string",
                               q="string",
                               offset="string",
                               after="string",
                               limit=integer
                               )
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

PARAMS = {
    "sort": "string",
    "filter": "string",
    "q": "string",
    "offset": "string",
    "after": "string",
    "limit": integer
}

response = falcon.command("query_events", parameters=PARAMS)
print(response)

query_firewall_fields

Get the firewall field specification IDs for the provided platform

PEP8 method name

query_firewall_fields

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
	platform_id	query	string	Get fields configuration for this platform
	offset	query	string	Starting index of overall result set from which to return ids.
	limit	query	integer	Number of ids to return.

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

response = falcon.query_firewall_fields(platform_id="string",
                                        offset="string",
                                        limit=integer
                                        )
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

PARAMS = {
    "platform_id": "string",
    "offset": "string",
    "limit": integer
}

response = falcon.command("query_firewall_fields", parameters=PARAMS)
print(response)

query_platforms

Get the list of platform names

PEP8 method name

query_platforms

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
	offset	query	string	Starting index of overall result set from which to return ids.
	limit	query	integer	Number of ids to return.

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

response = falcon.query_platforms(offset="string", limit=integer)
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

PARAMS = {
    "offset": "string",
    "limit": integer
}

response = falcon.command("query_platforms", parameters=PARAMS)
print(response)

query_policy_rules

Find all firewall rule IDs matching the query with filter, and return them in precedence order

PEP8 method name

query_policy_rules

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
	id	query	string	The ID of the policy container within which to query
	sort	query	string	Possible order by fields:
	filter	query	string	FQL query specifying the filter parameters. Filter term criteria: enabled, platform, name, description, etc TODO. Filter range criteria: created_on, modified_on; use any common date format, such as '2010-05-15T14:55:21.892315096Z'.
	q	query	string	Match query criteria, which includes all the filter string fields, plus TODO
	offset	query	string	Starting index of overall result set from which to return ids.
	limit	query	integer	Number of ids to return.

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

response = falcon.query_policy_rules(id="string",
                                     sort="string",
                                     filter="string",
                                     q="string",
                                     offset="string",
                                     limit=integer
                                     )
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

PARAMS = {
    "id": "string",
    "sort": "string",
    "filter": "string",
    "q": "string",
    "offset": "string",
    "limit": integer
}

response = falcon.command("query_policy_rules", parameters=PARAMS)
print(response)

query_rule_groups

Find all rule group IDs matching the query with filter

PEP8 method name

query_rule_groups

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
	sort	query	string	Possible order by fields:
	filter	query	string	FQL query specifying the filter parameters. Filter term criteria: enabled, platform, name, description, etc TODO. Filter range criteria: created_on, modified_on; use any common date format, such as '2010-05-15T14:55:21.892315096Z'.
	q	query	string	Match query criteria, which includes all the filter string fields, plus TODO
	offset	query	string	Starting index of overall result set from which to return ids.
	after	query	string	A pagination token used with the limit parameter to manage pagination of results. On your first request, don't provide an after token. On subsequent requests, provide the after token from the previous response to continue from that place in the results.
	limit	query	integer	Number of ids to return.

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

response = falcon.query_rule_groups(sort="string",
                                    filter="string",
                                    q="string",
                                    offset="string",
                                    after="string",
                                    limit=integer
                                    )
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

PARAMS = {
    "sort": "string",
    "filter": "string",
    "q": "string",
    "offset": "string",
    "after": "string",
    "limit": integer
}

response = falcon.command("query_rule_groups", parameters=PARAMS)
print(response)

query_rules

Find all rule IDs matching the query with filter

PEP8 method name

query_rules

Content-Type

• Produces: application/json

Parameters

Required	Name	Type	Datatype	Description
	sort	query	string	Possible order by fields:
	filter	query	string	FQL query specifying the filter parameters. Filter term criteria: enabled, platform, name, description, etc TODO. Filter range criteria: created_on, modified_on; use any common date format, such as '2010-05-15T14:55:21.892315096Z'.
	q	query	string	Match query criteria, which includes all the filter string fields, plus TODO
	offset	query	string	Starting index of overall result set from which to return ids.
	after	query	string	A pagination token used with the limit parameter to manage pagination of results. On your first request, don't provide an after token. On subsequent requests, provide the after token from the previous response to continue from that place in the results.
	limit	query	integer	Number of ids to return.

Usage

Service class example (PEP8 / Operation ID syntax)

from falconpy.firewall_management import FirewallManagement

falcon = FirewallManagement(client_id="API_CLIENT_ID_HERE",
                            client_secret="API_CLIENT_SECRET_HERE"
                            )

response = falcon.query_rules(sort="string",
                              filter="string",
                              q="string",
                              offset="string",
                              after="string",
                              limit=integer
                              )
print(response)

Uber class example

from falconpy.api_complete import APIHarness

falcon = APIHarness(client_id="API_CLIENT_ID_HERE",
                    client_secret="API_CLIENT_SECRET_HERE"
                    )

PARAMS = {
    "sort": "string",
    "filter": "string",
    "q": "string",
    "offset": "string",
    "after": "string",
    "limit": integer
}

response = falcon.command("query_rules", parameters=PARAMS)
print(response)