AvantGuard - SentinelOne

Actions682

Overview

This node operation deletes remote operational scripts on a SentinelOne platform via its Web API. It allows users to specify filters to select which scripts to delete, such as by site IDs, account IDs, OS types, group IDs, script types, or specific script IDs. This is useful for automating cleanup or management of remote scripts in large environments, for example, removing obsolete or unwanted scripts from multiple sites or accounts in bulk.

Properties

Name	Meaning
Filter	A JSON object specifying criteria to select which remote scripts to delete. It supports filtering by site IDs, account IDs, OS types, group IDs, script types, and specific script IDs.
Additional Body Fields	Optional additional fields to include in the delete request body, such as console data for logging or a flag to send activity notifications.

Output

JSON

success - Indicates whether the delete operation was successful.
deletedCount - Number of remote scripts that were deleted.
errors - Any errors encountered during the deletion process.

Dependencies

Requires an API key credential for authenticating with the SentinelOne Web API.
Depends on the '@avantguardllc/n8n-openapi-node' package for OpenAPI integration.

Troubleshooting

If the filter JSON is malformed, the node will fail to send a valid request. Ensure the filter is valid JSON.
If the API credentials are invalid or missing, authentication errors will occur. Verify the API key and base URL are correctly configured.
If no scripts match the filter criteria, the node may report zero deletions; verify filter values are correct and correspond to existing scripts.
Network or API endpoint issues can cause request failures; check connectivity and API availability.
If 'Send Activity' is enabled but the user lacks permissions, the API may reject the request.