Broadcast Message

description sends a custom message to sentinelone agents based on specified filter criteria; 'data' and 'filter' parameters are required endpoint url web/api/v2 0/agents/actions/broadcast method post inputs json body (object) – required filter (object) – required updatedat gte (string) operationalstates (array) type (string) locationidsnin (array) type (string) minimum (number) example (string) lastsuccessfulscandate between (string) externalip contains (array) type (string) minlength (number) groupids (array) type (string) minimum (number) example (string) threatrebootrequired (array) type (string) missingpermissions (array) type (string) example (string) enum (array) adusername contains (array) type (string) minlength (number) cloudtags contains (array) type (string) minlength (number) filterid (string) machinetypesnin (array) type (string) example (string) enum (array) cloudinstancesize contains (array) type (string) minlength (number) missingpermissionsnin (array) type (string) example (string) enum (array) liveupdateid contains (array) type (string) minlength (number) siteids (array) type (string) minimum (number) example (string) uuids (array) type (string) adusermember contains (array) type (string) minlength (number) k8sversion contains (array) type (string) minlength (number) agentversionsnin (array) type (string) example (string) lastloggedinusername contains (array) type (string) minlength (number) machinetypes (array) type (string) example (string) enum (array) consolemigrationstatusesnin (array) type (string) example (string) enum (array) appsvulnerabilitystatuses (array) type (string) example (string) enum (array) adcomputermember contains (array) type (string) minlength (number) lastactivedate gte (string) threatresolved (string) ispendinguninstall (string) cloudprovidernin (array) type (string) updatedat gt (string) lastsuccessfulscandate lte (string) useractionsneeded (array) type (string) example (string) enum (array) threatcreatedat gte (string) createdat between (string) ostypesnin (array) type (string) description (string) example (string) enum (array) rsolevel (string) agentnamespace contains (array) type (string) minlength (number) serialnumber contains (array) type (string) minlength (number) tagsdata (string) activethreats (number) adcomputerquery contains (array) type (string) minlength (number) awssubnetids contains (array) type (string) minlength (number) remoteprofilingstates (array) type (string) decommissionedat gte (string) corecount lte (string) cpucount gt (string) isuninstalled (array) type (string) lastactivedate lte (string) networkquarantineenabled (array) type (string) haslocalconfiguration (string) computername like (string) threatcreatedat lte (string) cloudaccount contains (array) type (string) minlength (number) consolemigrationstatuses (array) type (string) example (string) enum (array) computername contains (array) type (string) minlength (number) azureresourcegroup contains (array) type (string) minlength (number) corecount lt (string) corecount gt (string) networkinterfacephysical contains (array) type (string) minlength (number) threatcreatedat gt (string) activethreats gt (number) registeredat lte (string) cloudimage contains (array) type (string) minlength (number) accountids (array) type (string) minimum (number) example (string) cpucount lt (string) adquery contains (array) type (string) minlength (number) scanstatuses (array) type (string) example (string) enum (array) cpucount between (string) awssecuritygroups contains (array) type (string) minlength (number) createdat lte (string) totalmemory gt (string) threatcreatedat between (string) updatedat lt (string) externalid contains (array) type (string) minlength (number) threathidden (string) filteredgroupids (array) type (string) minimum (number) example (string) lastactivedate between (string) registeredat lt (string) rangerstatusesnin (array) type (string) example (string) enum (array) lastsuccessfulscandate lt (string) rangerstatus (string) k8snodelabels contains (array) type (string) minlength (number) cloudnetwork contains (array) type (string) minlength (number) networkinterfacegatewaymacaddress contains (array) type (string) minlength (number) threatcontenthash (string) registeredat gt (string) cpucount gte (string) isdecommissioned (array) type (string) domains (array) type (string) registeredat gte (string) isactive (string) k8stype contains (array) type (string) minlength (number) decommissionedat between (string) encryptedapplications (string) createdat gte (string) uuid (string) totalmemory gte (string) networkstatuses (array) type (string) example (string) enum (array) awsrole contains (array) type (string) minlength (number) agentversions (array) type (string) example (string) ostypes (array) type (string) description (string) example (string) enum (array) query (string) installertypesnin (array) type (string) example (string) enum (array) createdat gt (string) osarch (string) rangerversions (array) type (string) example (string) agentversion lte (string) gatewayip (string) gcpserviceaccount contains (array) type (string) minlength (number) agentversion gte (string) infected (string) cloudprovider (array) type (string) updatedat lte (string) mitigationmodesuspicious (string) lastactivedate gt (string) csvfilterid (string) corecount between (string) operationalstatesnin (array) type (string) rangerversionsnin (array) type (string) example (string) migrationstatus (string) cloudinstanceid contains (array) type (string) minlength (number) isuptodate (string) cloudlocation contains (array) type (string) minlength (number) lastactivedate lt (string) threatmitigationstatus (string) totalmemory lte (string) cpuid contains (array) type (string) minlength (number) totalmemory between (string) clustername contains (array) type (string) minlength (number) adquery (string) locationids (array) type (string) minimum (number) example (string) corecount gte (string) scanstatus (string) osversion contains (array) type (string) minlength (number) decommissionedat lte (string) filteredsiteids (array) type (string) minimum (number) example (string) domainsnin (array) type (string) locationenabled (array) type (string) lastsuccessfulscandate gte (string) appsvulnerabilitystatusesnin (array) type (string) example (string) enum (array) decommissionedat gt (string) rangerstatuses (array) type (string) example (string) enum (array) networkinterfaceinet contains (array) type (string) minlength (number) hascontainerizedworkload (string) uuid contains (array) type (string) minlength (number) firewallenabled (array) type (string) decommissionedat lt (string) registeredat between (string) agentversion lt (string) agentversion gt (string) lastsuccessfulscandate gt (string) totalmemory lt (string) aduserquery contains (array) type (string) minlength (number) ids (array) type (string) minimum (number) example (string) threatcreatedat lt (string) scanstatusesnin (array) type (string) example (string) enum (array) remoteprofilingstatesnin (array) type (string) computername (string) adcomputername contains (array) type (string) minlength (number) agentpodname contains (array) type (string) minlength (number) k8snodename contains (array) type (string) minlength (number) mitigationmode (string) remoteopsforensicssupported (string) networkstatusesnin (array) type (string) example (string) enum (array) useractionsneedednin (array) type (string) example (string) enum (array) installertypes (array) type (string) example (string) enum (array) hastags (string) agentversion between (string) createdat lt (string) cpucount lte (string) updatedat between (string) data (object) – required message (string) – required output example \[ { "status code" 200, "response headers" {}, "reason" "ok", "json body" { "errors" \[ { "type" "object" } ], "data" { "affected" "integer" } } } ] output parameters status code (number) reason (string) json body (object) errors (array) type (string) data (object) affected (string)