AvantGuard - ConnectSecure icon

AvantGuard - ConnectSecure

AvantGuard - ConnectSecure

Actions223

Overview

This node operation deletes an EDR (Endpoint Detection and Response) record by its unique identifier. It is useful in scenarios where you need to programmatically remove specific EDR entries from a system, such as cleaning up outdated or irrelevant security event data. For example, after investigating a security alert, you might want to delete the corresponding EDR record to maintain an organized dataset.

Properties

Name Meaning
X USER ID The user identifier required for authentication or tracking purposes in the request header.
Id The numeric identifier of the EDR record that you want to delete.

Output

The output JSON typically contains the response from the API confirming the deletion status of the specified EDR record. This may include success confirmation or error details if the deletion failed. The node does not output binary data.

Dependencies

  • Requires an API key credential for authenticating requests to the AvantGuard ConnectSecure service.
  • Needs the base URL of the API endpoint configured in the node credentials.
  • Depends on the @avantguardllc/n8n-openapi-node package for building request properties and handling API communication.

Troubleshooting

  • Missing or invalid X USER ID: Ensure the "X USER ID" property is correctly set; otherwise, the API may reject the request due to missing authentication headers.
  • Invalid or non-existent Id: If the provided EDR Id does not exist, the API will likely return an error indicating the resource was not found.
  • API connectivity issues: Verify network access and correct base URL configuration in credentials.
  • Permission errors: Confirm that the API key used has sufficient permissions to delete EDR records.

Links and References

Discussion