AvantGuard - SentinelOne

Actions682

Overview

This node updates an existing filter in the AvantGuard SentinelOne system via its Web API. It is designed to modify filter criteria by specifying a Filter ID and providing new filter data in JSON format. This is useful for automating the management of filters that control how data or devices are grouped or queried within SentinelOne, such as updating device selection criteria or saved search parameters.

Properties

Name	Meaning
Filter Id	The unique identifier of the filter to update. This is required to specify which filter will be modified.
Data	The JSON object containing the updated filter details, including filter fields and the filter name. This data defines the new criteria and metadata for the filter.

Output

JSON

response - The JSON response from the SentinelOne API after updating the filter, typically containing the updated filter details or status confirmation.

Dependencies

Requires an API key credential for AvantGuard SentinelOne API authentication.
Depends on the '@avantguardllc/n8n-openapi-node' package for API request handling.

Troubleshooting

Ensure the Filter Id provided is valid and exists in the SentinelOne system; otherwise, the API will return an error indicating the filter was not found.
The Data property must be a valid JSON string representing the filter update payload; invalid JSON will cause parsing errors.
API authentication failures may occur if the API key credential is missing or invalid; verify credentials in node settings.
Network or connectivity issues to the SentinelOne API endpoint can cause request failures; check baseURL and network access.
If the API returns validation errors, review the filter data structure to ensure all required fields and formats are correct.