Actions89
- Alert Actions
- Backup Actions
- Custom Field Actions
- Device Actions
- Document Template Actions
- Group Actions
- Knowledge Base Article Actions
- Location Actions
- Organization Actions
- Organization Document Actions
- Query Actions
- Related Item Actions
- System Actions
- Ticketing Actions
- User Actions
- Webhook Actions
Query → Antivirus Threats
AI-generatedSummary
Query antivirus threats from the NinjaOne API, optionally filtering results by device filter, cursor for pagination, page size, and a timestamp.
Inputs
- Authentication (required) — Choose the authentication method: OAuth2 (Authorization Code) or Client Credentials.
- Filters — Optional filter parameters including Device Filter (DF) string to refine devices, Cursor string for pagination, Page Size number to limit number of results per page (default 200), and Timestamp string to filter by time.
Output shape
a JSON array of antivirus threat records returned from the NinjaOne query endpoint
The output consists of an array of threat objects as returned by the NinjaOne API at the '/api/v2/queries/antivirus-threats' endpoint. Pagination can be controlled with 'cursor' and 'pageSize' filters. The 'Device Filter' (df) supports NinjaOne device filtering expressions to limit results to specific devices. 'Timestamp' may filter results by a specified time. The node returns the direct API response as JSON, suitable for further workflow processing.
Examples
Example 1: Retrieve the latest antivirus threats for all devices
Set 'Authentication' to preferred method, leave filters empty or specify 'Page Size' and 'Timestamp' as needed