SentinelOne software inventory: connect it to LICENSEWARE

SentinelOne is an API integration. Connect it before you export a file.

Create a service user with the Viewer role. Viewer is read-only. In the console, open Settings, then Users, then Service Users, and create the user. Copy the API token when it is shown. It is shown once.

1. Open Datasources from the sidebar and click SentinelOne.
2. Click Connect. Documentation is at the top right of the source page.
3. Fill the required fields. Each one is marked with *.
   • Console URL. The placeholder is https://yourtenant.sentinelone.net.
   • API Token
4. Verify connection and Save credentials stay disabled until every required field is filled. Click Verify connection first, then Save credentials.

See Data sources for how to check a connection.

SentinelOne collects endpoint telemetry and inventory data via its agent. The relevant data for SIM import is sourced from:

• Endpoints / Agents, Device hostname and operating system details.
• Installed Applications, Software name, version, and publisher discovered on endpoints.
• SentinelOne REST API, Programmatic access to agent and application inventory data.

Note: Software inventory visibility requires Application Inventory to be enabled in your SentinelOne tenant.

• Access to the SentinelOne Management Console.
• Role with permission to view Agents and Application Inventory.
• Endpoint agents actively reporting and fully initialized.
• Permission to export inventory data to CSV.

• SentinelOne API Token with read-only access.
• Access to the SentinelOne API endpoint (e.g. https://<tenant>.sentinelone.net/web/api/v2.1/).
• A PowerShell, curl, or Postman environment to execute REST API calls.
• (Recommended) Familiarity with API pagination for large environments.

This method is suitable for ad-hoc or smaller exports.

1. Log in to the SentinelOne Management Console.
2. Navigate to Inventory → Applications.
3. Apply filters as needed (e.g. all sites, all operating systems).
4. Ensure the following fields are visible:

• Endpoint Name
• Application Name
• Version
• Publisher

5. Click Export → CSV.
6. Save the file as SentinelOne_SIM_Export.csv.

Tip: You can save filters or views for recurring exports.

For automated or large-scale exports, use the SentinelOne REST API.

# SentinelOne SIM Template Export Script
# Requires SentinelOne API Token with application inventory access

$BaseUrl = "https://your-tenant.sentinelone.net/web/api/v2.1"
$ApiToken = "YOUR_API_TOKEN"
$ExportPath = "C:\Exports\SentinelOne_SIM_Export.csv"

$Headers = @{
    "Authorization" = "ApiToken $ApiToken"
    "Accept"        = "application/json"
}

# Retrieve installed applications
$Url = "$BaseUrl/application-management/applications?limit=1000"
$Response = Invoke-RestMethod -Uri $Url -Headers $Headers -Method Get

$ExportData = @()

foreach ($App in $Response.data) {
    foreach ($Agent in $App.agents) {
        $ExportData += [PSCustomObject]@{
            "Device Name"        = $Agent.computerName
            "Software Name"      = $App.name
            "Software Version"   = $App.version
            "Software Publisher" = $App.publisher
        }
    }
}

# Export to CSV
$ExportData | Export-Csv -Path $ExportPath -NoTypeInformation -Encoding UTF8
Write-Host "Export complete: $ExportPath"

For large environments, loop through paginated results using the cursor or offset values returned by the API.

The CSV header row must be exactly Device Name,Software Name,Software Version,Software Publisher.

1. Open the Licenseware SIM Template.
2. Go to the Software Inventory tab.
3. Paste the CSV data into the template

Remove blank or extraneous rows before saving.

Then upload it on the SIM - Template data source. See SIM template.

Device Name,Software Name,Software Version,Software Publisher
LAPTOP-001,Google Chrome,129.0.6668.90,Google LLC
SERVER-02,Microsoft SQL Server 2022,16.0.432,Microsoft Corporation
LAPTOP-004,Slack,4.39.95,Slack Technologies
WS-015,Adobe Acrobat DC,24.002.20933,Adobe Inc.