AvantGuard - SentinelOne

Actions682

Overview

This node interacts with the 'Datalake Inventory Endpoint' to export asset data from the 'Web Api Xdr Assets Surface Endpoint' in either CSV or JSON format. It is designed to retrieve detailed asset inventory information with extensive filtering options, enabling users to export customized datasets for analysis, reporting, or integration with other systems. Typical use cases include exporting asset inventories for security audits, compliance reporting, or feeding asset data into other tools.

Properties

Name	Meaning
Export Format	Specifies the format of the exported data, either CSV or JSON.
Additional Query Parameters	A collection of optional filters and parameters to refine the asset data export. These include filters on asset properties such as active coverage, agent status, operating system, tags, serial numbers, site IDs, and many others. Users can specify these parameters to narrow down the exported dataset according to their needs.

Output

JSON

data - The exported asset data in the requested format (CSV or JSON).
count - Total number of items matching the query if countOnly is used.
cursor - Cursor string for pagination to retrieve subsequent pages of data.

Dependencies

Requires an API key credential for authentication to the AvantGuard SentinelOne API.
Relies on the '@avantguardllc/n8n-openapi-node' package for OpenAPI integration.

Troubleshooting

Ensure the API credentials are correctly configured and have sufficient permissions to access the Datalake Inventory Endpoint.
If the export returns no data, verify that the filter parameters are correctly set and match existing assets.
When exporting large datasets, use the 'cursor' parameter to paginate through results beyond 1000 items.
If the node fails with HTTP errors, check the base URL and network connectivity to the API endpoint.
Invalid query parameters may cause the API to reject the request; ensure all filters conform to expected formats.