Get Activities

description retrieve activity data from sentinelone, applying specified filters to ensure relevant and manageable outcomes endpoint url /web/api/v2 1/activities method get inputs parameters (object) accountids (string) list of account ids to filter by activitytypes (string) return only these activity codes (comma separated list) select a code from the dropdown, or see the id field from the get activity types command activityuuids (string) return activities by specific activity uuids agentids (string) return activities related to specified agents alertids (string) return activities related to specified alerts countonly (boolean) if true, only total number of items will be returned, without any of the actual objects createdat between (string) get activities created in this range (inclusive) of a start timestamp and an end timestamp createdat gt (string) get activities created after this timestamp createdat gte (string) get activities created after or at this timestamp createdat lt (string) get activities created before this timestamp createdat lte (string) get activities created before or at this timestamp cursor (string) cursor position returned by the last request use to iterate over more than 1000 items groupids (string) list of group ids to filter by ids (string) filter activities by specific activity ids includehidden (boolean) include internal activities hidden from display limit (number) limit number of returned items (1 1000) ruleids (string) return activities related to specified rules siteids (string) list of site ids to filter by skip (number) skip first number of items (0 1000) to iterate over more than 1000 items, use "cursor" skipcount (boolean) if true, total number of items will not be calculated, which speeds up execution time sortby (string) the column to sort the results by sortorder (string) sort direction threatids (string) return activities related to specified threats useremails (string) email of the user who invoked the activity (if applicable) userids (string) the user who invoked the activity (if applicable) output output parameters status code (number) reason (string) json body (object) data (array) accountid (string) accountname (string) activitytype (number) activityuuid (string) agentid (object) agentupdatedversion (object) comments (object) createdat (string) data (object) accountname (string) filename (string) fullscopedetails (string) fullscopedetailspath (string) groupname (object) ipaddress (string) majorversion (string) minorversion (string) osarch (string) packageid (number) platformtype (string) realuser (object) scopelevel (string) scopename (string) sitename (object) sourcetype (string) status (string) username (string) version (string) description (object) groupid (object) groupname (object) hash (object) id (string) osfamily (object) primarydescription (string) secondarydescription (string) siteid (object) sitename (object) threatid (object) updatedat (string) userid (string) pagination (object) nextcursor (string) totalitems (number) response headers header type server string date string content type string transfer encoding string connection string x rqid string access control allow origin string access control allow credentials string vary string strict transport security string x frame options string x content type options string content security policy string cache control string pragma string expires string content encoding string