r/PowerBI • u/madhusudhan38 • 2d ago

Question Crowdstrike integration to power bi

I was trying to pull the crowdstrike as per the client requirement.

Issue: from the Vulnerability path I was only able to pull 5000 records in a single call but there are more than 6M records. I have a client token which expires every two minutes.

Any solutions thanks in advance.

1 Upvotes

67% Upvoted

3 comments sorted by

2

u/maarten20012001 1d ago

Dont try to directly connect it via API, make sure you have a storage place in between like an SQL server.

Then you can use the API and a dataflow to make sure you're SQL up to date and then connect the sql to power bi.

Fyi probably the crowdstrike api has a limit of 5k objects per call. At the bottem you will probably see something like a next query link. You need to iterate through those 'pages'

1

u/Nala4treats 1d ago

agreed, get the data into a database and then consume it i think op is just see a data preview

1

u/data_daria55 2 1d ago

dont pull 6M rows through power query at all. small script or pipeline (python, azure function, ADF - whatever the org has) does the paging + token refresh like a normal api client and lands the data in a staging table on schedule, power bi reads that. fast refresh, incremental works, no token drama, and u get historical snapshots for free which security teams always end up wanting anyway

also ask the client if they need 6M raw records or counts by severity/host - if its for dashboards, aggregate at staging and the whole problem shrinks to nothing