Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Actions60

Flag → Get

AI-generated

Summary

Retrieves a single Flag record from Datto EDR by ID via a GET request to the Flags/{id} endpoint, optionally limiting the returned fields.

Inputs

  • Flag ID (required) — ID of the Flag to fetch. The node throws an error if it is empty.
  • Options > Fields — Comma-separated list of fields to include in the response. Sent as the fields entry of the LoopBack filter query parameter.
  • Options > Order — Sort order string (e.g. "createdOn DESC"). Shown for this operation, but the Get request does not send it.
  • Options > Where (JSON) — Raw LoopBack where clause. Shown for this operation, but the Get request does not send it, so it has no effect on a single-record lookup.

Output shape

One output item per input item, containing the Flag record as returned by the Datto EDR API.

If fields is set, only those fields are requested. API errors (401, 403, 404, 429) are raised as descriptive node errors, or output as {error} items if Continue On Fail is enabled. If the API returns an empty result, the node emits {found: 0, resource, operation}.

Examples

Example 1: Fetch a specific flag by ID from a previous step.

Resource: Flag; Operation: Get; Flag ID: {{$json.flagId}}

Example 2: Retrieve only the name and creation date of a flag.

Flag ID: abc123; Options > Fields: "id,name,createdOn"

Links

Discussion