Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Actions60

Agent → Is Active

AI-generated

Summary

Checks whether a single Datto EDR agent is currently active/online by calling the agent's isActive endpoint, and returns the API's response as one item.

Inputs

  • Agent ID (required) — ID of the agent to check. It is inserted into the request path (GET Agents/{agentId}/isActive). An empty value throws an error saying agentId is required.

Output shape

A single item containing the JSON response from the Datto EDR API's Agents/{agentId}/isActive endpoint, which indicates whether the agent is active.

The node doesn't reshape the response, so the exact fields come from the API. Errors such as 401, 403, 404 and 429 are raised as node API errors. With Continue On Fail enabled, an item with an error message is returned instead. If the API returns an empty result, the node emits {found: 0, resource, operation}.

Examples

Example 1: Check an endpoint's online status before isolating it or running a scan.

Resource: Agent; Operation: Is Active; Agent ID: the agent's ID. Follow with an IF node on the result.

Example 2: Check agents from earlier nodes, one per item.

Resource: Agent; Operation: Is Active; Agent ID set to an expression such as {{ $json.agentId }}. The node runs once per input item.

Links

Discussion