Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Actions60

Suppression Rule → Create

AI-generated

Summary

Creates a new suppression rule in Datto EDR by POSTing a body built from a required name plus optional extra JSON properties to the SuppressionRules endpoint.

Inputs

  • Name (required) — Name for the suppression rule. Sent as name in the request body.
  • Additional Fields — JSON object of extra model properties (e.g. {"description":"...","organizationId":"..."}). Parsed if given as a string and merged into the request body. Defaults to {}. Because it is merged after Name, a name key in this JSON would overwrite the Name field.

Output shape

A single item containing the JSON record returned by the Datto EDR API for the newly created suppression rule.

Invalid JSON in Additional Fields throws a parse error. API errors (401, 403, 404, 429, others) are raised as node errors. With Continue On Fail enabled, an item with an error message is emitted instead. The node's Base URL credential must end with /api.

Examples

Example 1: Create a simple suppression rule by name

Name = "Ignore backup tool"; Additional Fields left as {}.

Example 2: Create a rule scoped to an organization with a description

Name = "Known admin script"; Additional Fields = {"description":"Approved IT script","organizationId":""}.

Links

Discussion