Get Agents

description obtain data for sentinelone agents using specific filters to identify and utilize agent ids in further operations endpoint url web/api/v2 1/agents method get inputs parameters (object) computername (string) infected (boolean) isactive (boolean) activethreats (array) domains (array) networkstatuses (array) externalip contains (string) ids (array) accountids (array) uuids (array) output example \[ { "status code" 200, "response headers" { "server" "nginx", "date" "wed, 16 nov 2022 17 35 13 gmt", "content type" "application/json", "transfer encoding" "chunked", "connection" "keep alive", "x rqid" "bd078c0d 1020 461b 885a 0028c992ac70", "access control allow origin" "https //attivo us sentinelone net", "access control allow credentials" "true", "vary" "origin", "strict transport security" "max age=31536000; includesubdomains", "x frame options" "sameorigin", "x content type options" "nosniff", "content security policy" "default src 'self' ; connect src 'self' cdn pendo io app pendo io pendo io data pendo io storage googleapis com sentry io sentry io google analytics com gstatic com unpkg com cdn auth0 com wss\ // sentinelone net https //www googletagmanager com https //cdnjs cloudflare com data ; script src 'self' 'unsafe inline' 'unsafe eval' cdn pendo io app pendo io pendo io static storage googleapis com cdn pendo io storage googleapis com data pendo io https //www google analytics com https //www googletagmanager com https //unpkg com https //cdnjs cloudflare com ; img src 'self' data https //www google analytics com cdn pendo io app pendo io sentinelone com storage googleapis com data pendo io ; style src 'self' 'unsafe inline' app pendo io cdn pendo io storage googleapis com https //fonts googleapis com https //cdnjs cloudflare com ; font src 'self' data https //fonts gstatic com https //cdn auth0 com ; frame src 'self' blob https //receptive io https // pendo io https //pendo io extensions storage googleapis com/ https // youtube com ; frame ancestors 'self' app pendo io ; object src 'none'", "cache control" "no store", "pragma" "no cache", "expires" " 1", "content encoding" "gzip" }, "reason" "ok", "json body" { "data" \[ { "accountid" "1286405255240245908", "accountname" "swimlane", "activedirectory" { "computerdistinguishedname" null, "computermemberof" \[], "lastuserdistinguishedname" null, "lastusermemberof" \[] }, "activethreats" 0, "agentversion" "21 10 1 6", "allowremoteshell" false, "appsvulnerabilitystatus" "not applicable", "cloudproviders" { "esxi" {} }, "computername" "ubuntu", "consolemigrationstatus" "n/a", "corecount" 2, "cpucount" 2, "cpuid" "intel(r) xeon(r) cpu e5 2699 v3 @ 2 30ghz", "createdat" "2022 11 10t20 04 42 684950z", "detectionstate" null, "domain" "unknown", "encryptedapplications" false, "externalid" "", "externalip" "96 79 235 37", "firewallenabled" true, "firstfullmodetime" null, "groupid" "1286405255265411734", "groupip" "96 79 235 x", "groupname" "default group", "id" "1550901640146865256", "inremoteshellsession" false, "infected" false, "installertype" " deb", "isactive" false, "isdecommissioned" false, "ispendinguninstall" false, "isuninstalled" false, "isuptodate" true, "lastactivedate" "2022 11 10t20🕙21 624510z", "lastiptomgmt" "10 32 0 158", "lastloggedinusername" "", "licensekey" "", "locationenabled" false, "locationtype" "not applicable", "locations" null, "machinetype" "server", "mitigationmode" "protect", "mitigationmodesuspicious" "detect", "modelname" "vmware, inc vmware virtual platform", "networkinterfaces" \[ { "gatewayip" "10 32 0 1", "gatewaymacaddress" "24 6e 96 1d 46 28", "id" "1550901640155253865", "inet" \[ "10 32 0 158" ], "inet6" \[ "fe80 250 56ff\ fe90 80e0" ], "name" "eth0", "physical" "00 50 56 90 80\ e0" } ], "networkquarantineenabled" false, "networkstatus" "connected", "operationalstate" "na", "operationalstateexpiration" null, "osarch" "64 bit", "osname" "linux", "osrevision" "ubuntu 14 04 6 lts 4 4 0 142 generic", "osstarttime" "2022 11 10t20 04 19z", "ostype" "linux", "osusername" "root", "rangerstatus" "notapplicable", "rangerversion" null, "registeredat" "2022 11 10t20 04 42 680790z", "remoteprofilingstate" "disabled", "remoteprofilingstateexpiration" null, "scanabortedat" null, "scanfinishedat" null, "scanstartedat" "2022 11 10t20 05 39 778639z", "scanstatus" "started", "serialnumber" null, "siteid" "1286405255257023125", "sitename" "default site", "storagename" null, "storagetype" null, "tags" { "sentinelone" \[] }, "threatrebootrequired" false, "totalmemory" 3951, "updatedat" "2022 11 16t03 20 46 218532z", "useractionsneeded" \[], "uuid" "2e24b3bf 5769 e031 35af 7ebaf2f3dcf3" } ], "pagination" { "nextcursor" null, "totalitems" 1 } } } ] output parameters status code (number) reason (string) json body (object) data (array) accountid (string) accountname (string) activedirectory (object) computerdistinguishedname (object) computermemberof (array) file name (string) – required file (string) – required lastuserdistinguishedname (object) lastusermemberof (array) file name (string) – required file (string) – required activethreats (number) agentversion (string) allowremoteshell (boolean) appsvulnerabilitystatus (string) cloudproviders (object) esxi (object) computername (string) consolemigrationstatus (string) corecount (number) cpucount (number) cpuid (string) createdat (string) detectionstate (object) domain (string) encryptedapplications (boolean) externalid (string) externalip (string) firewallenabled (boolean) firstfullmodetime (object) groupid (string) groupip (string) groupname (string) id (string) inremoteshellsession (boolean) infected (boolean) installertype (string) isactive (boolean) isdecommissioned (boolean) ispendinguninstall (boolean) isuninstalled (boolean) isuptodate (boolean) lastactivedate (string) lastiptomgmt (string) lastloggedinusername (string) licensekey (string) locationenabled (boolean) locationtype (string) locations (object) machinetype (string) mitigationmode (string) mitigationmodesuspicious (string) modelname (string) networkinterfaces (array) gatewayip (string) gatewaymacaddress (string) id (string) inet (array) inet6 (array) name (string) physical (string) networkquarantineenabled (boolean) networkstatus (string) operationalstate (string) operationalstateexpiration (object) osarch (string) osname (string) osrevision (string) osstarttime (string) ostype (string) osusername (string) rangerstatus (string) rangerversion (object) registeredat (string) remoteprofilingstate (string) remoteprofilingstateexpiration (object) scanabortedat (object) scanfinishedat (object) scanstartedat (string) scanstatus (string) serialnumber (object) siteid (string) sitename (string) storagename (object) storagetype (object) tags (object) sentinelone (array) file name (string) – required file (string) – required threatrebootrequired (boolean) totalmemory (number) updatedat (string) useractionsneeded (array) file name (string) – required file (string) – required uuid (string) pagination (object) nextcursor (object) totalitems (number) response headers header type server string date string content type string transfer encoding string connection string x rqid string access control allow origin string access control allow credentials string vary string strict transport security string x frame options string x content type options string content security policy string cache control string pragma string expires string content encoding string