Using the Dynamic Value Statement Wizard

You can create Dynamic Value Statements using the following methods:

• The Wizard
• The Autocomplete feature and Syntax Helper.

This page explains how to create Dynamic Value Statements using the Wizard.

After completing the Dynamic Value Statement and saving the Enforcement Set, you can click Simulate to debug the statement.

Creating a Dynamic Value Statement Using the Wizard

Adding an All Statement

This section describes how to construct an All statement using the Wizard.
You can use the Wizard to construct a simple set-value statement to set the value of an action field to the value of an adapter field. You can optionally enhance the Dynamic Value statement as follows:

• Configure an additional action field, using Also.
• Add alternative configurations to any of the action fields, using OR. You can define multiple adapter fields as possible sources for the value of the action field. The adapter fields are checked for values in the order that they are defined (top to bottom). When a value is found in a field, it is assigned to the action field, and the remaining adapter fields are ignored and not processed. If none of the fields in the OR clauses have a value, the default value (fallback) defined in the action field is used.

Learn more about All Statement Syntax.

To construct an All statement

1. Toggle on Configure Dynamic Values and then click Wizard. The Dynamic Value Statement Wizard for creating an All statement opens.

2. From the Select form field dropdown, select the action field to populate.
3. In the Adapter and Select Adapter Field dropdowns, select the adapter and its field whose value is to populate the action field (selected in the previous step). Learn more about how to select an adapter and how to select an adapter field.

4. Click + Add Alternative to add an OR clause to the statement and repeat the previous step. The screen below shows an All statement with several OR clauses.
5. Repeat the previous step for each OR clause that you want to add to the statement.
6. Click + Also to add an action field to the statement, and proceed according to the previous three steps.
7. Repeat the previous step for each action field that you want to include in the statement.

You can click Syntax to view the syntax of the statement created by the Wizard. Learn more about converting from WIzard to Syntax. The following screen shows the results of hovering over a component in the statement.

After saving the Enforcement Set, you can click Simulate from either above the Wizard or Syntax statement to debug the statement.

Adding a Switch/Case Statement

This section describes how to construct a Switch/Case statement using the Wizard.
You can use the Wizard to construct a simple set-value statement to define a condition that if met, sets the value of an action field to the value of an adapter field. You can optionally enhance the Dynamic Value statement as follows:

• Configure an additional action field to set if the condition is met, using Also.
• Add an alternative condition with its own set of action fields to set if the condition is met, using ELSE IF. The conditions are checked in the order that they are defined (top to bottom). When a condition is met, the action fields under that condition are assigned values, and the remaining conditions are ignored and not processed. If none of the conditions are met, the default value (fallback) defined in the action field is used.
  Learn more about Switch/Case Statement Syntax.

To construct a Switch/Case statement

1. Toggle on Configure Dynamic Values, click Wizard, and then click Switch to value by condition. The Dynamic Value Statement Wizard for creating a Switch/Case statement opens.

2. Configure the Switch part of the statement:
   1. From the Adapter and Select Adapter Field dropdowns, select the adapter and adapter field. Learn more about how to select an adapter and how to select an adapter field.
   2. From the Select operator dropdown, select the operator to use on the adapter field value, and in Write, type the value to compare to the field value using the operator.
      

3. Configure the Case part of the statement:

   1. From the Select form field dropdown, select the action field that you want to populate.
   2. Select whether to populate the action field with an adapter field or custom input.
      • Adapter field - For this choice, from the Adapter and Select Adapter Field dropdowns, select the adapter and adapter field.
      • Custom Input - For this choice, type a value in the Value (Write) box.

4. Click + Also to populate an additional action field in the Case part of the statement. Proceed as in the previous step.

5. Repeat the previous step for each action field that you want to populate for this IF condition.

6. Click Add Condition to add an ELSE IF clause to the statement and repeat the previous three steps.

7. Repeat the previous step for each ELSE IF clause to add to the statement.
   

You can click Syntax to view the syntax of the statement created by the Wizard. Learn more about converting from WIzard to Syntax.

After saving the Enforcement Set, you can click Simulate from either above the Wizard or Syntax statement to debug the statement. The following screen shows the results of hovering over a component in the statement.

Selecting an Adapter

The Adapter dropdown contains a list of all adapters that fetched data for assets. The adapter that you select from this dropdown controls the list of fields displayed in the Adapter Field dropdown.

The first entry and default selection in this dropdown is Aggregated represented by the icon. All Aggregated fields contain the aggregated (i.e., collated) values from all of the data that was fetched for all adapters, considered as common fields.

Selecting an Adapter Field

The Select Adapter Field dropdown contains a list of all the fields on that adapter. In the case of the Aggregated selection in the Adapter dropdown, this is a list of all fields whose data is collated from all adapters.

Converting from Wizard to Syntax

You can construct a statement in the Wizard screen and then convert and view its Syntax.
Click the Syntax button to convert Wizard to Syntax.

Converting from Syntax to Wizard

You can construct a statement in the Syntax screen and then convert and view it in the Wizard.
Click the Wizard button to convert syntax to wizard.

Examples

All Statement Example

The following screen shows an All statement example built in the Wizard.

The Axonius - Add Tag to Assets action runs on Vulnerability assets that match the critical vulns query.

For each vulnerability that matches the query, the statement assigns the action field Tag names the first non-empty value of the following adapter fields:

• CVE Impact Score
• CVSS V2 Score
• CVSS V3 Score

You can click the Syntax button to translate the statement constructed in the Wizard to syntax.

After saving the Enforcement Set, you can click Simulate from either above the Wizard or Syntax statement to debug the statement.

Switch/Case Statement Example 1

The following screen shows a Switch/Case statement example built in the Wizard.
For each vulnerability that matches the query, it checks if the CVSS V2 Score field in the Aggregated adapter is greater than 2 (the first condition).
If yes, the action field Tag names is assigned the value of the CVSS V2 Score adapter field.
If not, it checks if the CVSS V2 Score field in the Aggregated adapter is less than 2 (the second condition). If yes, the action field Tag names is assigned the value 0.
If none of the conditions are met, the action field Tag names is assigned the value fallback, defined as the default value in the action configuration form.

You can click the Syntax button to translate the statement constructed in the Wizard to syntax and validate it.

After saving the Enforcement Set, you can click Simulate from either above the Wizard or Syntax statement to debug the statement.

Switch/Case Statement Example 2

The following screen shows a Switch/Case example built in the Wizard.
For each device that matches the query, it checks if the Asset Name field in the Aggregated adapter meets the criteria listed in the first condition. If it does, the action field is assigned the value of the adapter field. If not, the next condition is checked. Once the Asset Name field value meets the criteria, the remaining ELSE IF conditions are not processed.

You can click the Syntax button to translate the statement constructed in the Wizard to syntax and validate it.

After saving the Enforcement Set, you can click Simulate from either above the Wizard or Syntax statement to debug the statement.