Asset Tags / Format or Example of creating a tag based on a registry key
Hi, have a need to apply an asset tag based on a registry key. Essentially if this key exists I want the asset to be included in a custom view that detects this tag. I need a guide on what the correct content and format should be in the "Path" & "Value" fields of the asset tag if the "Property" field is set to "Registry Key".
I have had a go but the the view is still empty so Im going wrong somewhere. The key details I need to check for are:
Key = HKEY_LOCAL_MACHINE\SOFTWARE\RedThread\Flags
Value Name = ImageFixApplied
Value Data = true
My asset tag fields are:
Property = Registry Key
Condition = Equals
Path = HKEY_LOCAL_MACHINE\SOFTWARE\RedThread\Flags
Value = ImageFixApplied
The asset view is empty so I'm guessing the above is incorrect?
Ta!
3 Replies
Ignore this. I have played and got it working.
@Nell can you please share a screenshot here for others? I'll update the Asset Tag UI to include instructions/examples
Sure thing Mikel.
For example working with the "HKEY_LOCAL_MACHINE\SOFTWARE\RedThreadTest" reg key that has a couple of data names and corresponding values that I would like to evaluate as per the attached.
What I wanted to achieve was to populate a custom asset view based on a tag that evaluated a registry key, its existence, value or a combination of both. For this example we'll create a custom asset tag that matches the data name "OnOff" that has a value of "0" in the reg key "HKEY_LOCAL_MACHINE\SOFTWARE\RedThreadTest". To configure this currently we would add the following the custom asset tag fields:
Property = Registry Key
Condition = Equals
Path = HKEY_LOCAL_MACHINE\SOFTWARE\RedThreadTest\OnOff
Value = 0
Screengrab of the Gorelo custom asset tag above, although you cannot see the full path it has been entered exactly as above.
If you just wanted to evaluate the existence of the reg key, you would use the following to fields:
Property = Registry Key
Condition = Exists
Path = HKEY_LOCAL_MACHINE\SOFTWARE\RedThreadTest
Again screengrab of the Gorelo custom asset tag above, although you cannot see the full path it has been entered exactly as above.
As the docs state regarding evaluation:
"Tag expressions are evaluated roughly every ~6 hours and immediately when the Gorelo.Rmm.Shell service is started (at first boot or manually)."
