Actions181
- Account Actions
- Accounts Actions
- App Block Actions
- Assets Actions
- Content Filtering Actions
- Create Content Filtering Rule
- Create Update DNS Settings
- Delete Content Filtering Rule
- Enable Disable Content Filtering Rule
- Enable Disable Content Filtering Rule For Policy
- Get A Content Filtering Rule Details
- Get A List Of Content Filtering Rules
- Get DNS Settings
- Get Domain Details
- Get Frequently Used Domain Names
- Get List Of Policies
- Update Content Filtering Rule
- CVE Actions
- Detections Actions
- Device Control Actions
- DNS Actions
- Endpoints Actions
- All Suspicious Activity Of An Endpoint
- Close Suspicious Activity Of An Endpoint
- Delete A Machine
- Delete Multiple Machines
- Endpoint Status
- Export Endpoints
- Get A Scan Of An Endpoint
- Get Endpoint
- Get Endpoint Agent Info
- Get Endpoint Assets
- Get Quarantined Items
- Get Scans Of An Endpoint
- Get The Detections Of A Scan
- Network Information
- Open Suspicious Activity Of An Endpoint
- Remediate Suspicious Activity Of An Endpoint
- Search Endpoints
- Search Grouped Endpoints
- Set Endpoint Tags
- Specific Suspicious Activity Of An Endpoint
- Events Actions
- Exclusions Actions
- Flight Recorder Actions
- Grid Actions
- Export CVEs
- Export Detections
- Export Device Control Events
- Export DNS Activity
- Export Endpoints
- Export Events
- Export OS Patches
- Export RID Rules
- Export Software Assets
- Search CVEs
- Search Detections
- Search Device Control Events
- Search DNS Activity
- Search Endpoints
- Search Events
- Search Events Groupby
- Search Grouped CVEs
- Search Grouped Detections
- Search Grouped Device Control Events
- Search Grouped DNS Activity
- Search Grouped Endpoints
- Search Grouped OS Patches
- Search Grouped RID Rules
- Search Grouped Software Assets
- Search OS Patches
- Search RID Rules
- Search Software Assets
- Groups Actions
- Installation Token Actions
- Installers Actions
- Jobs Actions
- Notifications Actions
- OS Patches Actions
- Policies Actions
- Products Actions
- Quarantine Actions
- Reports Actions
- RID Actions
- SA Actions
- Schedules Actions
- Usage Actions
- Users Actions
- Webhooks Actions
Usage → Search Logs Of Usage
AI-generatedSummary
Searches usage logs in Threatdown (Malwarebytes) by sending a POST request to the usage logs endpoint, with an optional date range and cursor-based paging set in the request body.
Inputs
- Body Fields — Collection of optional request body fields: Start Date (start_date, string), End Date (end_date, string), Page Size (page_size, number) and Next Cursor (next_cursor, number). The description doesn't state a date format, so use the one the Threatdown API expects.
- Additional JSON Body — Raw JSON object with extra body values. It is merged with the Body Fields collection. The source is only shown as signatures, so which side wins on conflicting keys isn't visible.
Output shape
Items built from the API response for the usage logs search. The node normalizes the response into n8n items.
The source is signature-only, so the exact response shape isn't visible. Paging is manual: pass Next Cursor from the previous response back in to fetch the next page. No path or query parameters are declared for this operation. Credentials supply the base URL and authentication.
Examples
Example 1: Fetch usage logs for a single month
Set Body Fields Start Date and End Date to the month's boundaries, and set Page Size to 100.
Example 2: Continue paging through a large result set
Set Next Cursor to the cursor value returned by the previous call, and keep the same Page Size and dates.
Example 3: Supply the whole body as JSON
Leave Body Fields empty and set Additional JSON Body to {"start_date":"...","end_date":"...","page_size":50}.