Actions158
- System Actions
- Organization Actions
- Devices Actions
- Get Device
- Get Device Active Jobs
- Get Device Activities
- Get Device Alerts
- Get Device Disk Drives
- Get Device Installed OS Patches
- Get Device Installed Software Patches
- Get Device Last Logged On User
- Get Device Network Interfaces
- Get Device Pending Failed Rejected OS Patches
- Get Device Pending Failed Rejected Software Patches
- Get Device Processors
- Get Device Services
- Get Device Software
- Get Device Volumes
- Get Node Custom Fields
- Update Node Attribute Values
- Get Policy Overrides
- Groups Actions
- Queries Actions
- Get Antivirus Status Report
- Get Antivirus Threats
- Get Computer Systems
- Get Custom Fields Detailed Report
- Get Custom Fields Report
- Get Device Health Report
- Get Device Usage
- Get Disk Drives
- Get Installed OS Patches
- Get Installed Software Patches
- Get Last Logged On Users Report
- Get Network Interfaces
- Get Operating Systems
- Get Pending Failed Rejected OS Patches
- Get Pending Failed Rejected Software Patches
- Get Policy Overrides 1
- Get Processors
- Get RAID Controller Report
- Get RAID Drive Report
- Get Scoped Custom Fields Detailed Report
- Get Scoped Custom Fields Report
- Get Software
- Get Volumes
- Get Windows Services Report
- Management Actions
- Get Custom Fields Policy Conditions
- Create Custom Fields Policy Condition
- Get Windows Event Policy Conditions
- Create Windows Event Policy Condition
- Delete Policy Condition
- Get Custom Fields Policy Condition
- Get Windows Event Policy Condition
- Create Organization
- Node Approval Operation
- Reset Alert
- Reset Alert Set Activity Data
- Update Device Maintenance
- Cancel Device Maintenance
- Control Windows Service
- Update Device
- Get Device Link
- Reset Policy Overrides
- Reboot Devices
- Remove Device Owner
- Request Scripting Options
- Run Script On Device
- Set Device Owner
- Set Windows Service Configuration
- Submit OS Patch Apply
- Submit OS Patch Scan
- Submit Software Patch Apply
- Submit Software Patch Scan
- Create Location For Organization
- Get Installer
- Get Installer For Location
- Update Organization
- Update Location
- Update Node Role Policy Assignment For Organization
- Create Policy
- Ticketing Actions
- Webhooks Actions
- Related Items Actions
- Location Actions
- Backup Actions
- Knowledge Base Articles Actions
- Upload Temp Attachments
- Download Knowledge Base Article
- Get Client Knowledge Base Articles
- Get Global Knowledge Base Articles
- Get Knowledge Base Article Signed Urls
- Get Knowledge Base Folder Content
- Get Knowledge Base Folder Path Content
- Download Related Item Attachment
- Get Related Item Attachments Signed Urls
- Organization Documents Actions
- Document Templates Actions
- Checklist Templates Actions
- Custom Fields Actions
- Organization Checklists Actions
Queries → Get Antivirus Threats
AI-generatedOverview
This node interacts with the NinjaOne API to retrieve antivirus threat data based on specified query parameters. It is designed to fetch detailed information about detected antivirus threats filtered by device, timestamp, pagination cursor, and page size.
Common scenarios where this node is beneficial include:
- Monitoring antivirus threats across devices in an IT environment.
- Integrating threat data into security dashboards or incident response workflows.
- Automating periodic retrieval of antivirus threat logs for compliance or auditing purposes.
For example, a user can configure the node to get all antivirus threats detected on a specific device since a certain timestamp, limiting results per page to manage large datasets efficiently.
Properties
| Name | Meaning |
|---|---|
| Df | Device filter: Specify a device identifier to filter antivirus threats related to that device. |
| Ts | Monitoring timestamp filter: Filter threats based on a specific monitoring timestamp. |
| Cursor | Cursor name: Used for pagination to continue fetching results from a specific point. |
| Page Size | Limit number of records per page: Controls how many threat records are returned per request. |
Output
The node outputs JSON data containing the antivirus threat information retrieved from the NinjaOne API. The structure corresponds directly to the API's response format for antivirus threats, typically including details such as threat identifiers, affected devices, timestamps, threat types, and statuses.
No binary data output is produced by this operation.
Dependencies
- Requires an active connection to the NinjaOne API using OAuth2 authentication.
- The node depends on proper configuration of the NinjaOne API credentials within n8n.
- Network access to the NinjaOne API endpoint is necessary.
Troubleshooting
- Empty or incomplete results: Ensure that the device filter (
Df) and timestamp (Ts) parameters are correctly set and correspond to existing data in NinjaOne. - Authentication errors: Verify that the OAuth2 credentials are valid and have not expired.
- Pagination issues: If using the
Cursorparameter, ensure it is correctly obtained from previous responses to paginate through results. - Missing binary data error: Not applicable here since this operation does not handle binary data.
- API rate limits: Be aware of NinjaOne API rate limits which may cause request failures; implement retry logic or reduce request frequency if needed.
Links and References
- NinjaOne API Documentation (general reference for API endpoints and parameters)
- n8n OAuth2 Credential Setup (for configuring OAuth2 credentials in n8n)