AvantGuard - SentinelOne

Actions682

Overview

This node operation allows users to export device inventory data from the Datalake Inventory Device resource via a web API call. It supports exporting data in CSV or JSON format and provides extensive filtering options through query parameters to tailor the exported dataset. This is useful for security analysts or IT asset managers who need to extract detailed device asset information for reporting, auditing, or integration with other systems.

Properties

Name	Meaning
Export Format	Specifies the format of the exported data, either CSV or JSON.
Additional Query Parameters	A collection of optional filters and parameters to refine the export query, such as filtering by device OS, tags, site IDs, asset criticality, date ranges, sorting options, pagination controls, and many other device attributes.

Output

JSON

data - The exported device inventory data in the requested format (CSV or JSON).
count - If 'countOnly' is true, the total number of matching items.
cursor - Cursor string for pagination to retrieve additional data beyond the current page.

Dependencies

Requires an API key credential for authentication to the AvantGuard SentinelOne API.
Relies on the base URL and headers configured in the node credentials.

Troubleshooting

If the API returns authentication errors, verify that the API key credential is correctly configured and has necessary permissions.
If no data is returned, check the filter parameters for correctness and ensure they match existing device data.
Pagination issues can occur if 'cursor' is not used properly when retrieving more than 1000 items; use the 'cursor' parameter to iterate.
Large exports may time out or be limited by the API; consider using filters and limits to reduce data size.
Invalid query parameter formats (e.g., JSON arrays) may cause API errors; ensure parameters are correctly formatted.