Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Actions60

Alert → Get Comments

AI-generated

Summary

Retrieves all comments attached to a single Datto EDR alert by its ID.

Inputs

  • Alert ID (required) — The ID of the alert whose comments to retrieve. The operation throws an error if this is empty.

Output shape

A list of items, one per comment returned by the API (GET Alerts/{alertId}/comments).

If the API returns a single object instead of an array, it is wrapped as one item. If the alert has no comments, the node emits a single placeholder item with found: 0, resource and operation. There is no pagination, filtering or limit. API errors (401, 403, 404, 429) are raised as node errors unless Continue On Fail is enabled.

Examples

Example 1: Pull the comment history of an alert during triage, before deciding on a response.

Resource: Alert; Operation: Get Comments; Alert ID: {{ $json.id }}

Links

Discussion