SentinelOne icon

SentinelOne

SentinelOne Management Console API specification.

Actions281

Reports → Get Reports

AI-generated

Overview

This node interacts with the SentinelOne Management Console API to retrieve reports based on specified filters and parameters. It supports fetching all reports or a single page of reports, with options to customize the query such as filtering by name, date range, scope, and other report-specific fields. This node is useful for automating the retrieval of security and insight reports from SentinelOne for further processing or analysis in workflows.

Use Case Examples

  1. Fetch all reports created within a specific date range to analyze endpoint security trends.
  2. Retrieve a single page of reports filtered by report name and scope for quick review.

Properties

Name Meaning
Return All Whether to return all results or only a single page. When disabled, no pagination parameters are sent and only one page of results is returned.
Additional Fields Optional filters and parameters to refine the reports query, such as name, skip, sort order, date filters, scope, site IDs, group IDs, limit, query string, task ID, account IDs, and others.

Output

JSON

  • id - Report ID
  • name - Report name
  • createdAt - Report creation timestamp
  • updatedAt - Report last update timestamp
  • schedule - Report schedule details
  • insightType - Type of insight report
  • creator
    • name - Name of the user who created the report
  • dateRange
    • fromDate - Start date of the report data range
    • toDate - End date of the report data range
  • frequency - Frequency of the report generation
  • scope - Scope of the report
  • siteIds - List of Site IDs associated with the report
  • groupIds - List of Group IDs associated with the report
  • accountIds - List of Account IDs associated with the report
  • taskId - ID of the task that generated the report

Dependencies

  • an API key credential

Troubleshooting

  • Ensure the API credentials are correctly configured and have the necessary permissions to access reports.
  • Check the pagination settings if not all reports are returned as expected.
  • Verify the filter parameters for correctness and compatibility with the SentinelOne API.
  • If the node returns errors, enable debug mode to inspect the actual API request and response for troubleshooting.

Links

Discussion