Skip to main content

I can't believe that I am the only one that finds themselves constantly doing this.

I am working with a new function in Crowdstrike (Submit URL) and sure enough, it fails if there is more than one input. I have lost count of the number of applications that I have had to add a loop in for it to be able to deal with more than one input.

And for this one it doesn't understand the entities. So I am going to need to write a loop that also adds http:// to the entity, otherwise it fails.


Is there some trick in the playbook that I am missing for dealing with more than one input? Or is everyone doing what I am doing.


and example from an AD lookup.


 if ',' in accountName:

      accountName2 = accountName.split(',')

      for i in accountName2:

        query_string_loop = '(sAMAccountName='+i+')'

        print (query_string_loop)

        try:

          entities, cookie = manager.search_with_paging(query_string_loop, SEARCH_PAGE_SIZE, cookie, limit)

        except:

          continue

        fetched_entities.extend(entities)   












Hi Brad, thank you for raising this, can you please elaborate on the issue? Action should support multiple urls to run on, is it possible to share the inputs you are setting for the action, and logs if possible?

Thanks,


Reply