Upgrading CrowdStrike inputs from Data Manager version 1.16

Automatic promotion

Data Inputs automatically promotes CrowdStrike FDR pull inputs created before version 1.17.0 to the new configuration model the next time you explicitly edit and save them. You do not need to perform any manual migration steps.

What happens during promotion

• Data Inputs converts the sensor event filter behavior that Data Manager version 1.16 applied by default (dropping heartbeat events) into an assignment to the Default Sensor Events Filter shared configuration, making it visible and manageable through the UI for the first time.
• Data Inputs doesn't assign a Device Properties Filter automatically, you can add one when you edit the input.

Transparency

Promotion is transparent, saving the input proceeds normally, and the result is a fully managed input that uses shared configurations. You do not need to perform any manual migration steps.

Non-edited inputs

Inputs that you never edit after upgrading continue to function as before. Data Inputs triggers the promotion only on the next explicit save.

However, the UI displays these inputs as using the default sensor events filter, even before promotion. This reflects the filtering behavior that was already applied by default in version 1.16, so the displayed configuration matches what the input is actually doing.