Actions120
- Alert Actions
- Backup Actions
- Custom Field Actions
- Device Actions
- Document Template Actions
- Group Actions
- Knowledge Base Article Actions
- Location Actions
- Organization Actions
- Organization Document Actions
- Query Actions
- Alerts
- Antivirus Status
- Antivirus Threats
- Backup Usage
- Computer Systems
- Custom Fields
- Custom Fields (Detailed)
- Device Health
- Disks
- Logged-On Users
- Network Interfaces
- Operating Systems
- OS Patch Installs
- OS Patches
- Policy Overrides
- Processors
- RAID Controllers
- RAID Drives
- Scoped Custom Fields
- Scoped Custom Fields (Detailed)
- Software
- Software Patch Installs
- Software Patches
- Volumes
- Windows Services
- Related Item Actions
- Software License Actions
- System Actions
- Get Activities
- Get Contacts
- Get Device Custom Fields
- Get Device Roles
- Get Devices (Detailed)
- Get End Users
- Get Jobs
- Get Locations
- Get Notification Channels
- Get Notification Channels (Enabled)
- Get Organizations (Detailed)
- Get Policies
- Get Scheduled Tasks
- Get Scripting Languages
- Get Scripts
- Get Software Products
- Get Technicians
- Get User Roles
- Ticketing Actions
- User Actions
- Webhook Actions
Query → Alerts
AI-generatedSummary
Query NinjaOne alerts using the Alerts endpoint. Optionally filter results by monitoring timestamp and device attributes; the node sends the filters as query parameters and returns the API response as n8n items.
Inputs
- Authentication (required) — Choose OAuth2 (Authorization Code) or Client Credentials and configure the matching NinjaOne credentials.
- Filters — Optional query filters: Cursor for pagination, Page Size (default 200), Timestamp, Approval Status, Device Classes, Device ID, Location ID, Online Status, Organization ID, and Role ID. ID fields accept comma-separated values.
Output shape
A list of n8n items containing the alert records returned by NinjaOne; each array element becomes an item’s JSON.
The operation makes one GET request to NinjaOne’s alerts query endpoint. Cursor is passed through as a query parameter; this operation does not fetch additional pages automatically.
