Overview

This node interacts with the SentinelOne Management Console API to set notification settings for specified Sites or Accounts. It allows users to update notification preferences such as enabling or disabling notifications for various events, and configuring delivery methods like email or syslog. This is useful for administrators who want to customize how and when they receive alerts from SentinelOne, ensuring they stay informed about important security events.

Use Case Examples

1. An administrator wants to update the email and syslog notification settings for a specific Account to receive alerts only for critical threats.
2. A security team configures notification settings for multiple Sites to enable syslog notifications for all activities and disable email alerts to reduce email noise.

Properties

Output

JSON

• json
  • debug - Debug information including URL, query parameters, headers, and body sent with the API request (if debug is enabled)

Dependencies

• An API key credential for SentinelOne Management Console authentication

Troubleshooting

• Ensure the API credentials are correctly configured and have the necessary permissions to update notification settings.
• Check that the Site or Account IDs provided are valid and accessible by the authenticated user.
• If the API request fails, enable debug mode to get detailed request and response information for troubleshooting.
• Be aware of API rate limits and use batching and request interval options to avoid hitting limits.

Links

• SentinelOne API Documentation - Set Notification Settings - Official API documentation for setting notification settings in SentinelOne Management Console.