Datto EDR icon

Datto EDR

Datto EDR (Infocyte): list and manage endpoints/agents, threats/alerts, scans, targets, quarantined files, and run response actions — isolate or scan an endpoint, archive or respond to alerts, restore quarantined files. For endpoint security operations, threat triage, and EDR reporting.

Webhook → Create

AI-generated

Summary

Creates a new webhook in Datto EDR by POSTing a body built from URL, optional Name, and optional extra JSON properties to the Webhooks endpoint.

Inputs

  • url (required) — Webhook endpoint URL that Datto EDR will call. Sent as url in the request body.
  • name — Display name for the webhook. Sent as name. Skipped if left empty.
  • additionalFields — JSON object of extra webhook model properties, merged into the request body (e.g. description, method, headers). Parsed from string if needed. Invalid JSON causes an error. Merged after URL and Name in field order, so matching keys in it override them.

Output shape

A single item containing the created webhook record as returned by the Datto EDR API.

If the API returns an empty response, the node emits a placeholder item with found: 0, resource and operation. API errors (401, 403, 404, 429, etc.) are raised as node errors unless Continue On Fail is enabled, in which case an item with an error message is output.

Examples

Example 1: Register a webhook that receives Datto EDR events at an n8n Webhook node URL

URL = https://n8n.example.com/webhook/edr, Name = 'n8n alerts', Additional Fields = {}

Example 2: Create a webhook with extra settings

URL = https://hooks.example.com/edr, Additional Fields = {"description":"SIEM forwarder","method":"POST","headers":{"X-Token":"abc"}}

Links

Discussion