Cherwell - Update Assets
- 16 Mar 2023
- 6 Minutes to read
- Print
- DarkLight
- PDF
Cherwell - Update Assets
- Updated on 16 Mar 2023
- 6 Minutes to read
- Print
- DarkLight
- PDF
Article Summary
Share feedback
Thanks for sharing your feedback!
Cherwell - Update Assets updates those device details in Cherwell for:
- Assets that match the results of the selected saved query, and match the Enforcement Action Conditions, if defined, or assets selected on the relevant asset page.
See Creating Enforcement Sets to learn more about adding Enforcement Actions to Enforcement Sets.
General Settings
- Enforcement Set name (required) - The name of the Enforcement Set. A default value is added by Axonius. You can change the name according to your needs.
- Add description - Click to add a description of the Enforcement Set. It is recommended to describe what the Enforcement Set does.
- Run action on assets matching following query (required) - Select an asset category and a query. The Enforcement Action will be run on the assets that match the query parameters.
- A query only returns results for the asset type it was created for.
- Not all asset categories are supported for all Enforcement Actions.
- See Actions supported for Activity Logs, Adapter Fetch History and Asset Investigation Modules
- See Actions supported for Vulnerabilities.
- See Actions supported for Software.
- Action name (required) - The name of the Main action. A default value is added by Axonius. You can change the name according to your needs.
- Configure Dynamic Values - Toggle on to enter a Dynamic Value statement. See Creating Enforcement Action Dynamic Value Statements to learn more about Dynamic Value statement syntax.
Required Fields
These fields must be configured to run the Enforcement Set.
- Use stored credentials from ... (required, default: False) - Select this option to use the first connected Cherwell adapter credentials.NOTE
- To use this option, you must successfully configure a Cherwell IT Service Management adapter connection.
- The user name and the password used for the adapter connection must be a user with permissions to create new incidents.
Additional Fields
These fields are optional.
- Cherwell domain (optional, default: empty) - The hostname or IP address of the Cherwell server.NOTEIf Use stored credentials from ... is disabled, this field is required.
- User name and Password (optional, default: empty) - The user name and the password of a user account that has permissions to read and to modify devices.NOTEIf Use stored credentials from ... is disabled, this field is required.
- Client ID (optional, default: empty) - Enter the client ID created in the CSM Administrator. For details, see Cherwell - Obtaining API Client IDs.NOTEIf Use stored credentials from ... is disabled, this field is required.
- Verify SSL (required, default: False) - Verify the SSL certificate offered by the value supplied in Cherwell domain. For more details, see SSL Trust & CA Settings.
- If enabled, the SSL certificate offered by the value supplied in Cherwell domain will be verified against the CA database inside of Axonius. If the SSL certificate can not be validated against the CA database inside of Axonius, the connection will fail with an error.
- If disabled, the SSL certificate offered by the value supplied in Cherwell domain will not be verified against the CA database inside of Axonius.
- Sleep 1 second every token request (optional, default: empty) - Select this option to wait before sending authentication tokens.
- HTTPS proxy (optional, default: empty) - A proxy to use when connecting to the value supplied in Cherwell domain.
- If supplied, Axonius will utilize the proxy when connecting to the value supplied in Cherwell domain.
- If not supplied, Axonius will connect directly to the value supplied in Cherwell domain.
- Additional fields (optional, default: empty) - Specify additional fields to be added as part of the Cherwell asset as key/value pairs in a JSON format. For example: {"field1": "value1", "field2": "value2"}.
- If supplied, Axonius will add the specified fields and values to the updated asset in Cherwell. If one of the specified fields is invalid, the request might fail.
- If not supplied, Axonius will not add any additional fields to the updated asset in Cherwell.
- Do not map default Axonius fields (required, default: False) - Select whether to map the set of default Axonius fields to the Cherwell asset.
- If enabled, default Axonius fields will not be mapped to the Cherwell asset.
- If disabled, default Axonius fields will be mapped to the Cherwell asset. For details, see Default Field Mapping.
- Do not overwrite existing field data (optional) - Select to prevent updating Cherwell fields that have not changed.
- Map Axonius fields to Cherwell fields (optional, default: empty) - Use the Field Mapping Wizard to map Axonius fields to fields in Cherwell. In this way you can transfer data found in Axonius into Cherwell. The wizard shows you which fields exist on the Axonius system, allowing you to map them easily.NOTE
For details, see Axonius to External Field Mapping.
- Use first IP address only (required, default: False) - Select whether the first IP address to be added to the Cherwell asset.
- If enabled, only the device's first IP address will be added to the Cherwell asset.
- If disabled, all the device's IP addresses will be added to the Cherwell asset.
- IP addresses delimiter (optional, default: /) - Specify the delimiter to separate between multiple IP addresses added to the Cherwell asset.
- If supplied, the specified delimiter will be used to separate between multiple IP addresses added to the Cherwell asset.
- If not supplied, the default delimiter will be used to separate between multiple IP addresses added to the Cherwell asset.
- Use first MAC address only (required, default: True) - Select whether the first MAC address to be added to the Cherwell asset.
- If enabled, only the device's first MAC address will be added to the Cherwell asset.
- If disabled, all the device's MAC addresses will be added to the Cherwell asset.
- MAC addresses delimiter (optional, default: /) - Specify the delimiter to separate between multiple MAC addresses added to the Cherwell asset.
- If supplied, the specified delimiter will be used to separate between multiple MAC addresses added to the Cherwell asset.
- If not supplied, the default delimiter will be used to separate between multiple MAC addresses added to the Cherwell asset.
- CIDR exclude list (optional, default: empty) - Specify a comma-separated list of CIDRs to be excluded.
- If supplied, Axonius will not add Cherwell IP addresses in the IP range of the specified CIDRs.
- If not supplied, Axonius will add Cherwell IP addresses in any IP range.
- CIDR include list (optional, default: empty) - Specify a comma-separated list of CIDRs to be included.
- If supplied, Axonius will only use Cherwell IP addresses in the IP range of the specified CIDRs.
- If not supplied, Axonius will add Cherwell IP addresses in any IP range.
- Number of parallel requests (optional, default 10) - Specify the number of machines that can be created in parallel.
- Exclude connections - From the list, select the connections to ignore. You can select more than one.
Default Field Mapping
When the Create Cherwell Asset action creates an asset in Cherwell for each of the query results entities, the asset in Cherwell is created with a set of attributes populated based on the following mapping:
Axonius Device Field | Cherwell Attribute |
---|---|
Asset Name / Host Name | name |
Device Manufacturer | manufacturer |
Device Manufacturer Serial / BIOS Serial | serial_number |
Network Interfaces: IPs | ip_address |
Network Interfaces: MAC | mac_address |
OS Type | os |
For more details about other Enforcement Actions available, see Action Library.
Was this article helpful?