Datto EDRInstall

Summary

Sends a freeform JSON payload to the Datto EDR Alerts response endpoint to trigger an AV response action (such as quarantine or delete) on alerts.

Inputs

• body (required) — JSON object sent as the request body for the alert response action. Fields depend on the response type (e.g. quarantine, delete), so check the Datto EDR API docs for the required shape. Accepts a JSON string or an object (e.g. from an expression). Defaults to {}.

Output shape

A single item containing the JSON response returned by the Datto EDR API for the response request.

The node does no validation of the body. If the body is an empty object, no request body is sent at all. A string body that isn't valid JSON throws a parse error. API errors (401, 403, 404, 429, others) are raised as node errors, or returned as {error} if Continue On Fail is enabled. If the API returns nothing, the output is {found: 0, resource, operation}.

Examples

Example 1: Trigger a response action on a specific alert after triage in a workflow

Resource: Alert, Operation: Respond, Body (JSON) set to the payload the Datto EDR API expects for the chosen response type (for example, with the alert ID or IDs and the action), often built with an expression from earlier node data.

Links

• n8n community nodes installation guide