Actions120
- Alert Actions
- Backup Actions
- Custom Field Actions
- Device Actions
- Document Template Actions
- Group Actions
- Knowledge Base Article Actions
- Location Actions
- Organization Actions
- Organization Document Actions
- Query Actions
- Alerts
- Antivirus Status
- Antivirus Threats
- Backup Usage
- Computer Systems
- Custom Fields
- Custom Fields (Detailed)
- Device Health
- Disks
- Logged-On Users
- Network Interfaces
- Operating Systems
- OS Patch Installs
- OS Patches
- Policy Overrides
- Processors
- RAID Controllers
- RAID Drives
- Scoped Custom Fields
- Scoped Custom Fields (Detailed)
- Software
- Software Patch Installs
- Software Patches
- Volumes
- Windows Services
- Related Item Actions
- Software License Actions
- System Actions
- Get Activities
- Get Contacts
- Get Device Custom Fields
- Get Device Roles
- Get Devices (Detailed)
- Get End Users
- Get Jobs
- Get Locations
- Get Notification Channels
- Get Notification Channels (Enabled)
- Get Organizations (Detailed)
- Get Policies
- Get Scheduled Tasks
- Get Scripting Languages
- Get Scripts
- Get Software Products
- Get Technicians
- Get User Roles
- Ticketing Actions
- User Actions
- Webhook Actions
Query → Antivirus Status
AI-generatedSummary
Query NinjaOne antivirus status records, optionally filtering by product, monitoring timestamp, and device attributes. The node sends the selected filters to the antivirus-status query endpoint and returns the response as n8n items.
Inputs
- Authentication (required) — Choose OAuth2 (Authorization Code) or Client Credentials and configure the matching NinjaOne credentials.
- Filters — Optional query parameters: cursor and page size (default 200); antivirus product name, product state, and monitoring timestamp; approval status; device classes; comma-separated device, location, organization, or role IDs; and online status. Device filters are combined into a NinjaOne device filter expression; other populated filters are sent as query parameters.
Output shape
A list of n8n items, one for each record when the API response is an array; otherwise one item containing the response object.
Calls NinjaOne's antivirus-status query endpoint once. Although a cursor filter is available, the operation does not automatically fetch subsequent pages.