SentinelOne icon

SentinelOne

SentinelOne Management Console API specification.

Actions281

Explore → Prefetch events

AI-generated

Overview

This node operation triggers the prefetching of threat events for a specified threat ID in the SentinelOne Management Console. Prefetching events helps to speed up the response time of subsequent API calls related to threat events. It is particularly useful when you want to prepare the system to quickly retrieve detailed threat event data for analysis or investigation.

Use Case Examples

  1. Use this node to prefetch events for a specific threat ID before fetching detailed event data, improving the performance of threat analysis workflows.
  2. In a security automation workflow, prefetch threat events to reduce latency when querying event details for incident response.

Properties

Name Meaning
Threat Id The unique identifier of the threat for which to prefetch events. This is a required input to specify the target threat.
Return All Whether to return all results or only a single page. When disabled, no pagination parameters are sent and only one page of results is returned.
Options Additional optional settings including custom request body, headers, query filters, batching, debug mode, pagination settings, and request timeout.

Output

JSON

  • json - The JSON response from the SentinelOne API containing the result of the prefetch events operation.

Dependencies

  • An API key credential for SentinelOne Management Console API

Troubleshooting

  • Ensure the Threat Id is correctly specified and exists in the SentinelOne system.
  • Check API credentials and permissions to confirm access to the prefetch events endpoint.
  • If the node times out, consider increasing the Timeout (ms) setting in the node options.
  • Enable Debug mode to get detailed request and response information for troubleshooting.

Links

Discussion