feat(cortex-xdr): endpoint_count counts by operational status (1.10.0)

The endpoints API has no filter on operational_status, so the endpoints
the other filters match are read 100 at a time and counted by the script.
Lets an agent reporting playbook count the agents in error, as
SentinelOne's operationalStatesNin does.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LaiNEwG2W5Y9fMo4qXcesr
This commit is contained in:
2026-10-13 08:43:18 +00:00
parent 91855fce4f
commit 62157e5dee
2 changed files with 25 additions and 4 deletions
File diff suppressed because one or more lines are too long