SentinelOne icon

SentinelOne

SentinelOne Management Console API specification.

Actions281

Agents → Count by Filters

AI-generated

Overview

This node operation counts the number of SentinelOne agents that match specified filter criteria. It is useful for obtaining quick statistics about agents in your environment based on various attributes such as OS type, threat status, hardware specs, and more. For example, you can count how many agents are currently active, infected, or belong to a specific group or site.

Use Case Examples

  1. Count all active agents in an account.
  2. Get the number of agents with a specific OS version or vulnerability status.
  3. Determine how many agents have pending uninstall requests.

Properties

Name Meaning
Return All Whether to return all results or only a single page. When disabled, no pagination parameters are sent and only one page of results is returned.
Additional Fields Various filter criteria to narrow down the agents to count, such as K8S node name, core count, ranger statuses, threat creation date, operational states, and many more. These filters allow precise targeting of agents for counting.

Output

JSON

  • count - The count of agents matching the specified filters

Dependencies

  • An API key credential for SentinelOne Management Console API

Troubleshooting

  • Ensure the API credentials are valid and have sufficient permissions to query agent data.
  • Check that the filter parameters are correctly formatted and supported by the API.
  • If pagination is enabled, verify that pagination settings are correct to avoid incomplete results.
  • Review error messages for rate limiting or network issues and adjust request frequency or network settings accordingly.

Links

Discussion