Datto EDRInstall

Summary

Retrieves quarantined file records from Datto EDR (QuarantinedFiles endpoint), optionally filtered, sorted, and limited or fully paginated.

Inputs

• Return All — If true, pages through all results (100 per page, up to 200 pages, then errors asking you to narrow the filter). Default false.
• Limit — Max records to return when Return All is off. Minimum 1, default 50.
• Filters — Multiple conditions on Hostname, Agent ID, or Organization ID. Operators: equals, not equals, greater/less (or equal), contains (wrapped as %value%), and in-list (comma-separated). Numeric-looking values are coerced to numbers for eq/gt/gte/lt/lte. Empty values are skipped.
• Options > Order — LoopBack sort string, e.g. "createdOn DESC".
• Options > Fields — Comma-separated list of fields to include in each returned record.
• Options > Where (JSON) — Raw LoopBack where clause merged over the Filters, so it overrides the same keys and allows any field or operator. Invalid JSON is silently ignored.

Output shape

One n8n item per quarantined file record, containing the JSON object returned by the API.

If nothing matches, a single item {found: 0, resource, operation} is emitted instead of an empty result. Filters and options are sent to the API as a LoopBack filter query parameter. With Return All off, only one request with the limit is made.

Examples

Example 1: List the 20 most recent quarantined files for one host

Return All off, Limit 20, Filter Hostname equals "WS-042", Options Order "createdOn DESC"

Example 2: Fetch all quarantined files across several agents

Return All on, Filter Agent ID In List "agent-1, agent-2, agent-3"

Example 3: Use a custom query to find files for an organization with limited fields

Where (JSON) {"organizationId":"abc123"}, Fields "id,hostname,agentId", Limit 100

Links

• n8n community nodes installation guide