AvantGuard - SentinelOne icon

AvantGuard - SentinelOne

AvantGuard - SentinelOne

Actions682

Overview

This node performs an autocomplete search on XDR asset filters within the Datalake Inventory Filters resource. It allows users to query asset metadata by specifying a search key and text, along with numerous optional filtering parameters to refine the search results. This is useful for dynamically retrieving matching asset filter values based on partial input, aiding in building complex queries or UI autocomplete features.

Properties

Name Meaning
Key The search field key to filter assets by. Options include 'Id Contains', 'Name Contains', 'Tags Key Contains', 'Tags Key Value Contains', and 'Image Name Contains'. This determines which asset attribute the search text will be matched against.
Text The search term text to autocomplete against the selected key.
Additional Query Parameters A collection of optional filters to further refine the autocomplete search results. These include filters on cloud provider details, asset status, tags, regions, categories, agent states, risk factors, and many others. Each parameter corresponds to a query parameter sent to the API to narrow down the results.

Output

JSON

  • results - An array of autocomplete matching filter values returned by the API based on the search key, text, and optional filters.

Dependencies

  • Requires an API key credential for authentication to the AvantGuard SentinelOne API.
  • Relies on the '@avantguardllc/n8n-openapi-node' package for OpenAPI integration.

Troubleshooting

  • If the node returns no results, verify that the 'Key' and 'Text' inputs are correctly set and that optional filters do not overly restrict the query.
  • Authentication errors may occur if the API key credential is missing or invalid; ensure valid credentials are configured.
  • Malformed JSON in any of the 'Additional Query Parameters' fields can cause request failures; ensure JSON syntax is correct.
  • API rate limits or network issues may cause request failures; check connectivity and API usage limits.

Discussion