Community
Questions Library
Docs
Blog
Events
Swag
Github
Slack
JupiterOne
Discussions
Release Notes
Contact Us
Add Enriched or Modified Properties - AskJ1 Community
<main> <article class="userContent"> <p>JupiterOne allows users to <em>enrich</em> or add properties to a resource. JupiterOne also allows you to modify the existing properties of a resource.</p> <h2 data-id="add-enriched-and-modified-properties">Add enriched and modified properties</h2> <h3 data-id="enrich-a-resource-s-properties-in-the-ui">Enrich a resource's properties in the UI</h3> <p>Let's take the example of our needing to classify all of our organization's resources for compliance reasons. To start, let's run a query to determine which of our resources do not already have a classification property defined.</p> <pre class="code codeBlock" spellcheck="false" tabindex="0">Find * with classification=undefined or classification='' </pre> <p>You can now enrich the classification property in the UI for each of the resources returned by following these steps:</p> <ol><li>Select the entity from the list of results</li> <li>Click on the three vertical dots to access settings</li> <li>Click on <em>Edit</em></li> <li>Enter a value under <em>Classification</em></li> <li>Click <em>Save</em></li> </ol><p><img src="https://us.v-cdn.net/6035534/uploads/7YKTDRJ2IGZ9/enrich-modify-edit.png" alt="enrich-modify-edit" class="embedImage-img importedEmbed-img"></img></p> <p><img src="https://us.v-cdn.net/6035534/uploads/9LMLVNHN48UH/enrich-modify-edit-page.png" alt="enrich-modify-edit-page" class="embedImage-img importedEmbed-img"></img></p> <p>Keep in mind that when you enrich/modify a property in JupiterOne, these changes are only reflected in JupiterOne, and not to the properties of a entity at the source. It is recommended to make changes at the data source when possible.</p> <h3 data-id="modify-a-resource-s-properties-in-the-ui">Modify a resource's properties in the UI</h3> <p>Let's take a different example of needing to modify the display name of a resource because the name displayed in the JupiterOne graph view does not provide helpful context.</p> <ol><li>Select the entity from the list of results</li> <li>Click on the three vertical dots to access settings</li> </ol><p>From here, there are two ways to modify a resource's properties:</p> <ol><li>Toggle properties that have a true or false value</li> </ol><p><img src="https://us.v-cdn.net/6035534/uploads/CUYBJMSNGFMP/enrich-modify-edit-toggles.png" alt="enrich-modify-edit-toggles" class="embedImage-img importedEmbed-img"></img></p> <ol start="2"><li>Click on <em>Edit</em> -> Select <em>Custom Properties</em> -> Edit the value next to <em><a href="https://jupiterone.vanillacommunities.com/profile/displayName-value" rel="nofollow">@displayName-value</a></em> -> Click <em>Save</em></li> </ol><p><img src="https://us.v-cdn.net/6035534/uploads/9TDYUNWMBSB1/enrich-modify-edit-page-custom-props.png" alt="enrich-modify-edit-page-custom-props" class="embedImage-img importedEmbed-img"></img></p> <h3 data-id="reset-the-value-of-enriched-or-modified-properties">Reset the value of enriched or modified properties</h3> <p>When you are viewing the properties of an entity, edited properties will have either an <code class="code codeInline" spellcheck="false" tabindex="0">Enriched</code> banner or a <code class="code codeInline" spellcheck="false" tabindex="0">Modified</code> banner next to them. If the original value of the property was undefined or null, the property will be flagged as <code class="code codeInline" spellcheck="false" tabindex="0">Enriched</code>. Otherwise, the property is flagged as <code class="code codeInline" spellcheck="false" tabindex="0">Modified</code>.</p> <p>If the property had an original value from a JupiterOne managed integration, when you hover over the chip, you will see the original value in a tooltip.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/L6V62P9L0ZYI/enrich-modify-edit-modified-banner.png" alt="enrich-modify-edit-modified-banner" class="embedImage-img importedEmbed-img"></img></p> <p>In both instances, you can reset the property to the original value by clicking on the horizontal dots, and selecting <em>Reset Value</em>. This will remove the modified banner.</p> <p><img src="https://us.v-cdn.net/6035534/uploads/NIV9UX1U5J0G/enrich-modify-edit-reset-value.png" alt="enrich-modify-edit-reset-value" class="embedImage-img importedEmbed-img"></img></p> </article> </main>
.png)