Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Suppression Rule → Get

AI-generated

Summary

Retrieve a single Datto EDR suppression rule by its ID via a GET request to SuppressionRules/{id}, optionally limiting the returned fields.

Inputs

  • Suppression Rule ID (required) — ID of the suppression rule to fetch. The operation throws an error if it is empty.
  • Options > Fields — Comma-separated list of fields to include in the response. Sent as a LoopBack filter fields array.
  • Options > Order — Sort order string (e.g. "createdOn DESC"). It is shown in the UI, but the Get operation does not send it, so it has no effect on a single-record fetch.
  • Options > Where (JSON) — Raw LoopBack where clause. It is shown in the UI, but the Get operation does not send it, so it has no effect.

Output shape

A single item whose json is the suppression rule record returned by the Datto EDR API.

If Fields is set, only those fields are requested. An API error such as 404 for an unknown ID fails the item, or is returned as {error} if Continue On Fail is enabled. If the API returns an empty result, the node emits {found: 0, resource, operation}.

Examples

Example 1: Fetch one suppression rule by ID, for example to inspect its configuration.

Resource: Suppression Rule; Operation: Get; Suppression Rule ID: the rule's ID (can be an expression such as {{$json.id}}).

Example 2: Retrieve only the name and creation date of a rule.

Suppression Rule ID: abc123; Options > Fields: "id,name,createdOn".

Links

Discussion