Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Box → Get

AI-generated

Summary

Retrieve a single Datto EDR Box record by its ID, with optional field selection.

Inputs

  • boxId (required) — ID of the Box to fetch. Used in the request path (GET Boxes/{id}). The operation errors if it is empty.
  • options.fields — Comma-separated list of field names to include in the response. It is sent as a LoopBack filter 'fields' list.
  • options.order — Sort order string. It is shown for this operation, but the Get request ignores it.
  • options.whereJson — Raw LoopBack where clause as JSON. It is shown for this operation, but the Get request ignores it.

Output shape

One n8n item per input item, with the Box record as its JSON.

Only the 'fields' option is sent to the API. Order and Where (JSON) are accepted by the UI but have no effect on Get. A missing ID returns a 404 API error. If the API response is non-JSON (usually a Base URL without /api), the node errors. With Continue On Fail enabled, errors are returned as {error: message}.

Examples

Example 1: Fetch a known Box with all its fields.

Resource: Box, Operation: Get, Box ID: an ID taken from an earlier step.

Example 2: Fetch only the name and target of a Box.

Box ID set to an expression like {{$json.boxId}}. Options > Fields: id,name,targetId.

Links

Discussion