Open topic with navigation

Adding and Editing Command Parameters

The Attributes list includes Velocity Expressions for all event fields and an option to add user field or item selections, channel start or end time, date/time, and other Velocity Expressions as attributes.

Where:

To provide parameters for a command:

  1. Click the browse button to get the Parameters dialog.

  2. Click Attributes to get a list of variables and Velocity Expressions. The right-click menus on this panel give you access to velocity expressions, fields, and variables you can use as parameter values in commands.

  3. Select the expression you want to add. The attribute list includes Global Variables. If the global variable to add is composed of a list of fields, expand the global variable displayed in the Parameters dialog and select the field you want.

    The expression is added to the Edit Attributes scratch pad as a parameter.

  4. You can continue adding expressions, which are chained together.

    For example, selecting Threat > Priority from the Attributes list results in this parameter being placed on the scratch pad:

    ${priority}

    Subsequently selecting Attacker > Address, updates the scratch pad entry with chained-together expression:

    ${priority} ${attackerAddress}

    Tip: The Parameters dialog is an editable note pad. In addition to adding Velocity Expressions from the Attributes menu and Templates for Connector command parameters, you can type new expressions directly into the dialog. Also, you can select and edit existing expressions manually.

    See also Removing a Command Parameter.

  5. When the Parameters scratch pad reflects the expressions you want to include as command parameters, click OK.

    The parameters you added are reflected on the Attributes tab in the Command Editor.

Be sure to click Apply or OK on the Command Editor to save changes to command parameters along with any other changes to the command that you want to retain.