Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Agent → Get Many

AI-generated

Summary

Retrieves multiple Datto EDR agents (endpoints) from the Agents API, optionally filtered, sorted, field-limited, and capped by a limit or fully paginated.

Inputs

  • Return All — When true, pages through all results (100 per page, up to 200 pages, then errors asking you to narrow the filter). Default false.
  • Limit — Max number of agents to return when Return All is off. Minimum 1, default 50.
  • Filters — Multiple conditions combined into a LoopBack where clause. Each has a Field (Hostname, Active, Authorized, Isolated, Organization, OS), an Operator (Equals, Not Equals, Greater/Less Than or Equal, Contains, In List comma-separated) and a Value. Conditions with an empty value are ignored. Equals, >, >=, <, <= convert numeric-looking values to numbers. Contains wraps the value in %…%. Boolean fields are entered as string values.
  • Options > Order — Sort order string, e.g. "createdOn DESC".
  • Options > Fields — Comma-separated list of fields to include in each returned agent.
  • Options > Where (JSON) — Raw LoopBack where clause merged over the Filters, so its keys override same-named filter fields. Invalid JSON is silently ignored.

Output shape

One output item per agent record returned by the Datto EDR API (GET Agents with a filter query).

If nothing matches, a single item {found: 0, resource, operation} is emitted. With Return All off, only one request is made, capped by Limit. Errors surface as node API errors, or as {error} items if Continue On Fail is enabled.

Examples

Example 1: List all isolated Windows agents

Return All on; Filters: Isolated Equals "true", OS Equals "windows".

Example 2: Find the 20 most recently created agents with a hostname containing 'srv'

Limit 20; Filter: Hostname Contains "srv"; Options Order "createdOn DESC"; Fields "id,hostname,os".

Links

Discussion