datto_edr_alerts_count
Count Datto EDR alerts matching the same filters as the alert list—time range, LoopBack where conditions, archive table, and archived status—to get totals for triage and reporting.
Instructions
Count alerts matching the same filters as datto_edr_alerts_list (GET /api/Alerts/count).
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| where | No | Extra LoopBack where filter, combined with AND, e.g. {"hostname":{"ilike":"%sql%"}}. Operators: eq, neq, gt, gte, lt, lte, between, inq, nin, like, ilike, and, or. Use datto_edr_api_models to see a model's properties. | |
| end_time | No | Only alerts created at or before this ISO date/time | |
| start_time | No | Only alerts created at or after this ISO date/time | |
| archive_table | No | Query the alert archive table (alerts older than 30 days) instead of live alerts | |
| include_archived | No | Include alerts marked archived (default false) |