How to find pagination tokens when using commands?

[mabaumgartner]

Description of your question
When using the Get-FalconConfigAssessment function, the All parameter is great and most of the time we use this. But when pulling large datasets in an environment where memory usage is a concern, the ability to manually step through pages of results would be beneficial. Maybe I'm overlooking something but the -After parameter seems to be able to take the token for the next page of data, but there doesn't seem to be a way for the function to return that code. Maybe the right question is, how would one go about getting the initial Pagination token to then use in subsequent calls in the -After parameter?

To Reproduce
A command like $assessments = Get-FalconConfigAssessment -Filter "updated_timestamp:>'2025-09-15T20:36:35Z'+finding.status:!'inactive'" -Limit 500 provides the first page of 500 results. But I haven't yet found a way in the module to get the initial pagination token.

Expected behavior
I would like to be able to retrieve the pagination token when using the -Limit parameter so that I could use it in subsequent API calls in the -After parameter.

Environment (please complete the following information):

• OS: Windows 11
• PowerShell: 7.4.11
• PSFalcon: 2.2.8

Additional context
I now see there is a v2.2.9 of the module, which I have not yet tested, but reviewing the release notes and commits it doesn't look like there were any changes to Get-FalconConfigAssessment from v2.2.8.

[bk-cs]

When running a command without any additional parameters, you'll be provided the first set of results returned from the relevant API. Some APIs return 100 results by default and others return more. Using the -Limit parameter allows you to manipulate the number per response.

PSFalcon generally removes result pagination as a concept with the intent to provide a command-line style experience to accessing data from the CrowdStrike APIs. If you'd like to attempt to retrieve all of the available results (or the first 10,000, if limited by the API, which is common), you can use the -All parameter.

Get-FalconConfigAssessment -Filter "updated_timestamp:>'2025-09-15T20:36:35Z'+finding.status:!'inactive'" -All

Using -All will also automatically provide the highest available -Limit (when documented or otherwise discovered when the API is added to PSFalcon).

Each of these parameters are detailed when using Get-Help for a particular PSFalcon command (with or without -Online).

[mabaumgartner]

Thanks for the quick response. That all makes sense. I guess it was just the fact that the After parameter was implemented that made me think that I might have been overlooking a way to get the original pagination token while still using the PSFalcon module. So just to confirm, there is no way within the module to get that first token that I could then use with the After parameter, correct? Thanks again.

[bk-cs]

So just to confirm, there is no way within the module to get that first token that I could then use with the After parameter, correct?

You could capture verbose output and parse it out; but I've designed PSFalcon so that you'd hopefully never need to use the pagination token.

[mabaumgartner]

Understood. Thanks!