Use Case
I want to tag assets as ‘MissingRapid7Agent’, ‘MissingOtherVendorAgent’, etc. The issue is once the assets have the agent, I don’t believe the tag will be removed.
Progress So Far
I’ve created a query for ‘MissingRapid7Agent’ and added an “Add Tag” workflow that correctly adds ‘MissingRapid7Agent’ and will schedule it for daily.
Now I’d like to remove the ‘MissingRapid7Agent’ tag once the asset is no longer in that query.
I create a Not Missing Rapid7 Agent query and started on a workflow to remove the tag.
There is no specific function for this like add tag, so I’m looking at Set Property.
I can clear the tags property entirely, which some may consider a work around, but then we would not be able to use any tags except those scheduled to be added each day. I don’t want to do that, so I’d like to be able to edit the tags to be all tags except the one provided as “value” to the workflow. Basically, I want a remove tag workflow, not a clear tags workflow.
I’m not sure how powerful expressions are, but I thought they may be able to help here. If I can use them to replace or substitute a string I could do something like asset.tags.replace(“MissingRapid7Agent”, “”)