Actions281
- Accounts Actions
- Account Policy
- Update Account Policy
- GenerateRegenerate Uninstall Password
- Get Uninstall Password Metadata
- Revoke Uninstall Password
- Get Uninstall Password
- Get Account by ID
- Update Account
- Expire an Account
- Reactivate Account
- Revert Policy
- Get Accounts
- Create Account
- Get accounts private
- Available Name
- Get Accounts for Navigation
- Get One Account
- Policy Actions
- UninstallPassword Actions
- Activities Actions
- Agents Actions
- Abort Scan
- Approve Uninstall
- Broadcast Message
- Can run Remote Shell
- Clear Remote Shell
- Connect to Network
- Decommission
- Disable Agent
- Disconnect from Network
- Enable Agent
- Fetch Firewall Rules
- Get Installed Apps for agent
- Initiate Scan
- Mark as uptodate
- Move to Console
- Move between Sites
- Randomize UUID
- Disable Ranger
- Enable Ranger
- Reject uninstall
- Reset Local Config
- Set Persistent Configuration Overrides
- Set External ID
- Shutdown
- Start Remote Profiling
- Start Remote Shell
- Stop Remote Profiling
- Uninstall
- Update Software
- Fetch Files
- Export Agent Logs
- Get Agents
- Get Application
- Count Agents
- Get Passphrase
- Processes
- DEPRECATED Get Agent Available Actions
- Get Agent Available Actions
- Event Throttling
- Flush Event Queue
- Protect
- Purge Crash Dumps
- Purge DB
- Purge Research Data
- Reload
- Restart
- Revoke Token
- Send Crash Dumps
- Send Research Data
- Unprotect
- Randomize DV Host
- Auto Complete
- Count by Filters
- FreeText Filters
- Count Summary
- Get config
- Actions Actions
- Abort Scan
- Approve Uninstall
- Broadcast Message
- Can run Remote Shell
- Clear Remote Shell
- Connect to Network
- Decommission
- Disable Agent
- Disconnect from Network
- Enable Agent
- Fetch Firewall Rules
- Get Installed Apps for agent
- Fetch Logs
- Fetch Firewall Logs
- Initiate Scan
- Mark as uptodate
- Move to Console
- Move between Sites
- Randomize UUID
- Disable Ranger
- Enable Ranger
- Reject uninstall
- Reset Local Config
- Restart
- Set Persistent Configuration Overrides
- Set External ID
- Shutdown
- Settings Actions
- Tasks Actions
- Threats Actions
- Get Enriched Events
- Count Events by Type
- Get Process Event
- Prefetch events
- Get Timeline Limits
- Get Tree
- Threat Analysis
- Threat Appearances
- Connect Agents
- Disconnect Agents
- Get Threat Available Actions
- Create Slim Threat
- Add to Blacklist Deep Visibility
- Mark as Threat Deep Visibility
- Auto Complete
- Count by Filters
- FreeText Filters
- Create Deep Visibility Threat
- Multiple actions for Threats
- Threat Summary
- Get Timeline Categories
- Update Threat Note
- Delete Threat Note
- Get Threat Notes
- Download from cloud
- Get Events
- Get Threat Timeline
- Exclusion Options
- Get Threats
- Add to Blacklist
- Add to Exclusions
- Update Threat Analyst Verdict
- Disable Engines
- Export Threats
- Update Threat External Ticket ID
- Fetch Threat File
- Updated Threat Incident
- Mitigate Threats
- Export Mitigation Report
- Add Note to Multiple
- Explore Actions
- Users Actions
- iFrame Token Details
- Login by iFrame Token
- Get Token
- Revoke iFrame Token
- Disable 2FA
- Enable 2FA
- Auth App
- Sign EULA
- Auth Recovery Code
- Redirect to SSO
- Auth by SSO
- Login
- Login by API Token
- Login by Token
- Send Verification Email
- Validate Verification Token
- Email Verification
- Get User
- Update User
- Delete User
- API Token by User ID
- List users
- Create User
- API Token Details
- Change Password
- Bulk Delete Users
- Enable 2FA App
- Generate API Token
- Generate iFrame Token
- Generate Recovery Code
- Check Global User
- Details Actions
- DeviceReview Actions
- Rbac Actions
- Role Actions
- RemoteScripts Actions
- ReportTasks Actions
- Reports Actions
- ActiveDirectory Actions
- Microsoft Actions
- Notifications Actions
- Recipients Actions
- Sms Actions
- Smtp Actions
- Sso Actions
- Notes Actions
- Download Actions
- Packages Actions
- Update Actions
- Upload Actions
- Software Actions
- 2fa Actions
- Auth Actions
- Login Actions
- SsoSaml2 Actions
- Onboarding Actions
- ApplicationInventory Actions
- ApplicationInventoryCounts Actions
- LastActivityAsSyslog Actions
- Sentinelonerss Actions
- SiteWithAdmin Actions
- Tests Actions
- User Actions
Reports → Get Insight Reports
AI-generatedOverview
This node interacts with the SentinelOne Management Console API to retrieve Insight Report types. It is useful for users who want to access predefined high-level and detailed endpoint security reports, including statistics, trends, and summaries about their network. For example, it can be used to fetch available Insight Report types to understand the security posture of endpoints across different sites, groups, or accounts.
Use Case Examples
- Fetch Insight Report types to display available reports for endpoint security analysis.
- Retrieve Insight Report types filtered by Site IDs, Group IDs, or Account IDs to focus on specific segments of the network.
Properties
| Name | Meaning |
|---|---|
| Return All | Whether to return all results or only a single page. When disabled, no pagination parameters are sent and only one page of results is returned. |
| Additional Fields | Optional filters to narrow down the Insight Reports by Site IDs, Group IDs, Account IDs, or to force update the data. |
Output
JSON
id- Insight Report IDname- Insight Report namedescription- Description of the Insight ReportcreatedAt- Creation timestamp of the reportupdatedAt- Last update timestamp of the reportsiteIds- List of Site IDs associated with the reportgroupIds- List of Group IDs associated with the reportaccountIds- List of Account IDs associated with the reportforceUpdate- Indicates if the report data was force updated
Dependencies
- An API key credential for SentinelOne Management Console API
Troubleshooting
- Ensure the API credentials are correctly configured and have the necessary permissions to access Insight Reports.
- If pagination is enabled, verify that the pagination parameters are correctly set to avoid incomplete data retrieval.
- Check network connectivity and API endpoint availability if requests fail.
- Review API rate limits and adjust batching or request intervals to prevent throttling.
Links
- SentinelOne API - Get Insight Report Types - Official API documentation for retrieving Insight Report types from SentinelOne Management Console.