Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Suppression Rule → Get Many

AI-generated

Summary

Retrieves suppression rules from Datto EDR (the SuppressionRules model), either all of them or up to a limit, with optional sorting, field selection, and a raw LoopBack where filter.

Inputs

  • Return All — If true, pages through the API (100 per request, max 200 pages) and returns every rule. Default false.
  • Limit — Max number of results when Return All is off. Minimum 1, default 50.
  • Options > Order — LoopBack sort order string, e.g. "createdOn DESC".
  • Options > Fields — Comma-separated list of fields to include in each returned rule.
  • Options > Where (JSON) — Raw LoopBack where clause as JSON, e.g. {"name":"My rule"}. Sent as the filter's where condition. Invalid JSON is silently ignored, and an empty {} adds no filter.

Output shape

A list of items, one per suppression rule, each holding the rule's JSON record as returned by the Datto EDR API.

If no rules match, a single item is emitted: {found: 0, resource, operation}. The Filters condition builder is not exposed for this resource, so use Where (JSON) to filter. With Continue On Fail enabled, errors are emitted as {error: message}. Requires the Datto EDR API credential, whose Base URL must end in /api.

Examples

Example 1: List the 20 most recently created suppression rules

Return All off, Limit 20, Options > Order = "createdOn DESC"

Example 2: Export every suppression rule with just name and ID

Return All on, Options > Fields = "id,name"

Example 3: Find rules by name

Options > Where (JSON) = {"name":"Allow backup tool"}

Links

Discussion