Configuring Triggers

You can execute an enforcement set on a saved query or on specific devices or users. To execute an enforcement on a saved query, you need to configure a trigger. Otherwise, if you want to execute the enforcement set on specific devices or users, triggers are optional.

To configure the enforcement set trigger:

1. From the Enforcement Set page, click Trigger. The Trigger drawer opens.
   

2. Select the query type (Devices, Users, Activity logs, Fetch History or Vulnerabilities) and a single Saved Query for the enforcement set to act on. This defines which of the modules; Devices, Users, Activity logs, Fetch History or Vulnerabilities, the enforcement set actions will be performed on starting with the Main Action. Only saved queries with public access are available for use with enforcement triggers.
   
   

3. To perform the Main Action only on newly added entities, select the Run on added entities only checkbox. Otherwise, the Main Action will be executed on all query results.

   NOTE

   The Run on added entities only checkbox value is taken into consideration only when the enforcement set runs automatically, as a result of its configured scheduling. If the enforcement set runs manually, it will always take all query results, ignoring the Run on added entities only checkbox value.

4. You can configure the enforcement set to be executed automatically, under configured scheduling and additional conditions, or manually by the user. To set automatic scheduling for the enforcement set:
   1. Toggle Enable automation. The Custom Schedule Settings section is displayed. Use Custom Schedule Settings to configure custom scheduling for the enforcement set. Otherwise the enforcement set only runs when you trigger it manually.
   2. From the Repeat Scheduled Run drop-down field, select the schedule type:
      • Every discovery cycle - The enforcement set will run at the end of each discovery cycle.
      • Every x hours - The enforcement set will run every number of hours defined in the Scheduled run every (hours) field.
        • The enforcement task start time is determined based on the specified value, starting midnight. For example, if the specified value is 6, the triggers times are: 12am, 6am, 12pm, 6pm, 12am, etc.
        • The start time for the next enforcement task will be the closest interval. For example, If the specified value is 6, and the configuration was saved at 10am, the next enforcement task will start at 12pm.
        • The maximum possible value is 24.
      • Every x days - The enforcement set runs every number days defined in the Scheduled run every (days) field at the time specified in Scheduled run time field. The start time is determined based on the specified value, starting the 1st of each month. For example, if the specified value is 10, the Action is triggered on 1st, 11th, 21st, 31st (if exists), 1st, 11th, etc. The first start time is the is the closest interval. For example, If the specified value is 10, and the configuration was saved on the 12th, the next trigger for the action will be on the 21st. The maximum possible interval is 30.
      • Days of week - The enforcement set runs on the selected days of week as specified in the Scheduled run day(s) field at the time specified in Scheduled run time field.
      • Days of month - The enforcement set runs on the selected days of month as specified in the Scheduled run day(s) field at the time specified in Scheduled run time field.
        
        
5. To detect changes in the query results and add conditions for triggering the Main Action, click the Additional Conditions toggle button. Then select at least one of the conditions:
   • Only when assets have been added since the last execution (in comparison to the last time the enforcement set had been executed).
   • Only when assets have been removed since the last execution (in comparison to the last time the enforcement set had been executed).
   • Only when the number of assets is above N - specify numeric value. Default value is 1.
   • Only when the number of assets is below N - specify numeric value. Default value is 1.
     The enforcement set runs and generates a new enforcement task only if at least one of the conditions is met.
     
     
6. Click Save to save your trigger configuration.