In most cases, the rule you are creating is only meant to apply to a subset of findings. If this is the case, select Match field.
Rules apply to one plugin or tool at a time. Select from the list of available plugins to decide which plugin this Rule should apply to.
Fill in the name of the field that should trigger the rule. For example, if you're creating a Rule to apply based on the value of the Severity field, you'd enter
For more details, see Where do I find the Field name? below.
Choose the condition that best matches the Rule you're creating. The available conditions are:
The Value field wraps up the trigger. This field will contain a number, word, or a phrase depending on how you've configured the rest of the fields.
The field name is specific to the plugin that you are using and the name is mostly likely determined by your settings in the Plugin Manager.
If you haven't done so, now would be a great time to review the Upload and work with tool output page of the Working with Projects guide for a quick review of how the Plugin Manager and the Rules Engine work together:
Because the Plugin Manager is applied to findings before the Rules Engine, use the Dradis field names you define in the Plugin Manager (e.g.
Title) when setting your field name here in the Rules Engine.
If you wanted to find a match based on the
plugin_name field coming in from Nessus, your first instinct might be to set up your condition like the example below:
Wait! Remember what we said about the Plugin Manager applying to incoming findings first?
If you have your Plugin Manager configured like the example above, you can instead use the Field value of
Title in your Rule because by the time the finding reaches the Rules Engine, the Plugin Manager will have changed the original
highwill not be applied the same as a value of
Next help article: Action: Discard Finding →