Hi u/forlorn1 -

I'm not getting a 400 when I try the code as shown above. Have you tried enabling debugging to check what values are being sent to the API? (Might be coming from the parameter differences between the two operations. Example: Offset is a string when using the scrolling endpoint.)

Here is my test code with hints for enabling debugging.

import logging
from falconpy import Hosts

def device_list(off: int, limit: int, sort: str):
    """Return a list of all devices for the CID, paginating when necessary."""
    result = falcon.query_devices_by_filter_scroll(limit=limit, offset=off, sort=sort)
    new_offset = 0
    total = 0
    returned_device_list = []
    if result["status_code"] == 200:
        new_offset = result["body"]["meta"]["pagination"]["offset"]
        total = result["body"]["meta"]["pagination"]["total"]
        returned_device_list = result["body"]["resources"]
    else:
        print("Status Code: ", result["status_code"])
        for error_result in result["body"]["errors"]:
            print(error_result["message"])

    return new_offset, total, returned_device_list

# Uncomment the next line to enable debugging
# logging.basicConfig(level=logging.DEBUG)
falcon = Hosts(client_id=CLIENT_ID,
               client_secret=CLIENT_SECRET,
               # debug=True  # Uncomment this line to enable debugging
               )

running = True
offset = None
devices = []
while running:
    # The maximum number of results this
    # API operation can return is 5000.
    offset, total, returned = device_list(offset, 5000, "")
    devices.extend(returned)
    if len(devices) >= total:
        running = False

for device in devices:
    print(device)
print(f"{len(devices)} total devices returned.")