AvantGuard - SentinelOne

Actions682

Overview

This node performs an autocomplete search on the Datalake Inventory Workstations resource using the Web API XDR Assets Surface Endpoint Filters Autocomplete Get operation. It allows users to query workstation assets with a search term and a specified key field, supporting a wide range of optional filters to refine the search results. This is useful for quickly finding specific workstation assets based on various attributes such as ID, name, tags, agent details, hardware specs, network info, and more. For example, a security analyst can use this node to autocomplete and filter workstations by partial hostname or serial number to identify assets of interest.

Properties

Name	Meaning
Text	The search term text used for the autocomplete query.
Key	The search field key specifying which asset attribute to search within (e.g., id, name, tagsKey, agentUuid, cpu, serialNumber, etc.).
Additional Query Parameters	Optional collection of additional query parameters to further filter the autocomplete results, such as agent status, asset criticality, OS family, date ranges, tags, network info, and many others.

Output

JSON

results
- ``
  * id - The unique identifier of the workstation asset.
  * name - The name of the workstation asset.
  * additionalProperties - Other asset properties returned by the API depending on the query and filters.

Dependencies

Requires an API key credential for authentication to the AvantGuard SentinelOne API.
Depends on the base URL and headers configured in the node credentials.

Troubleshooting

If the node returns no results, verify that the 'Text' and 'Key' inputs are correctly set and that any additional filters are not overly restrictive.
Authentication errors may occur if the API key credential is missing or invalid; ensure credentials are properly configured.
Malformed query parameters in 'Additional Query Parameters' may cause API errors; validate JSON syntax and parameter names.
Network connectivity issues to the API endpoint can cause request failures; check network access and base URL correctness.