AvantGuard - SentinelOne

Actions682

Overview

This node performs the 'Stop Profiling' action on SentinelOne agents via the AvantGuard SentinelOne API. It allows users to specify a complex filter to select which agents the action should apply to, enabling targeted management of agent profiling states. This is useful in scenarios where administrators want to stop profiling on a subset of agents based on detailed criteria such as agent version, OS type, location, or other metadata. For example, an admin could stop profiling on all Linux agents with a specific version range or those located in certain sites.

Properties

Name	Meaning
Filter	A JSON object defining criteria to select agents to which the 'Stop Profiling' action will be applied. Only agents matching this filter will be affected. Leaving it empty applies the action to all applicable agents.
Additional Body Fields	Optional additional JSON fields to include in the request body, allowing customization or extension of the API call with extra data.

Output

JSON

response - The JSON response from the SentinelOne API after performing the stop profiling action, typically containing status or result details.

Dependencies

AvantGuard SentinelOne API
An API key credential for authentication with the AvantGuard SentinelOne service

Troubleshooting

If the filter JSON is malformed or invalid, the node may fail to execute properly. Ensure the filter is valid JSON and matches the expected schema.
Authentication errors may occur if the API key credential is missing or incorrect. Verify the credential configuration.
If no agents match the filter criteria, the action will have no effect; verify the filter to ensure it targets intended agents.
Network or API endpoint issues can cause request failures; check connectivity and base URL configuration.