{
	"version": "2.0",
	"name": "ForeScout Assets Mgmt",
	"comment": "Assets Management",
	"type": "REST_EVENT",
	"event_type": [
      "LEASE",
      "FIXED_ADDRESS_IPV4",
      "HOST_ADDRESS_IPV4"
	],
  "transport": {"path": "/fsapi/niCore/Hosts"},
	"action_type": "Assets Management",
	"content_type": "application/xml",
	"vendor_identifier": "ForeScout",
	"quoting": "XML",
	"steps": [

		{
			"name": "DebugOnStart",
			"operation": "NOP",
			"body": "${XC:DEBUG:{H:}}${XC:DEBUG:{E:}}${XC:DEBUG:{I:}}${XC:DEBUG:{L:}}${XC:DEBUG:{S:}}${XC:DEBUG:{P:}}${XC:DEBUG:{UT:}}"
		},

    {
        "name": "assignSyncTime",
        "operation": "NOP",
        "body_list": ["${XC:COPY:{L:SyncDate}:{UT:TIME}}${XC:FORMAT:TRUNCATE:{L:SyncDate}:{16t}}"]
    },

    {
      "name": "stop_if_just_changed",
      "operation": "CONDITION",
      "condition": {
        "condition_type": "AND",
        "statements": [
            {"left": "${E:A:values{extattrs}{FS_SyncedAt}{value}}", "op": "==", "right": "${L::SyncDate}"},
            {"left": "${E:A:operation_type}", "op": "==", "right": "MODIFY"}
        ],
        "stop": true
      }
    },

    {
      "name": "check_for_not_Lease",
      "operation": "CONDITION",
      "condition": {
        "condition_type": "AND",
        "statements": [
            {"left": "${E::event_type}", "op": "!=", "right": "LEASE"},
            {"left": "${E:A:values{extattrs}{FS_Sync}{value}}", "op": "==", "right": "true"}
        ],
        "eval": "${XC:ASSIGN:{L:Sync}:{S:true}}${XC:COPY:{L:Site}:{E:values{extattrs}{FS_Site}{value}}}${XC:COPY:{L:RemediateOnEvent}:{E:values{extattrs}{FS_RemediateOnEvent}{value}}}${XC:COPY:{L:Obj_ref}:{E:values{_ref}}}${XC:COPY:{L:IP}:{E:values{ipv4addr}}}${XC:COPY:{L:NV}:{E:values{network_view}}}${XC:ASSIGN:{L:Obj_Ref_Add}:{S:}}",
        "else_eval": "${XC:ASSIGN:{L:Sync}:{S:false}}"
      }
    },

    {
      "name": "check_MAC",
      "operation": "CONDITION",
      "condition": {
        "condition_type": "AND",
        "statements": [
            {"left": "${E::event_type}", "op": "!=", "right": "LEASE"},
            {"left": "${E:A:values{extattrs}{FS_Sync}{value}}", "op": "==", "right": "true"},
            {"left": "${E:A:values{mac}}", "op": "!=", "right": ""}
        ],
        "eval": "${XC:COPY:{L:MAC}:{E:values{mac}}}",
        "else_eval": "${XC:ASSIGN:{L:MAC}:{S:000000000000}}"
      }
    },

    {
      "name": "check_for_Lease",
      "operation": "CONDITION",
      "condition": {
        "condition_type": "AND",
        "statements": [
            {"left": "${E::event_type}", "op": "==", "right": "LEASE"},
            {"left": "${E:A:ip.extattrs{FS_Sync}}", "op": "==", "right": "true"}
        ],
        "eval": "${XC:ASSIGN:{L:Sync}:{S:true}}${XC:COPY:{L:Site}:{E:ip.extattrs{FS_Site}}}${XC:COPY:{L:RemediateOnEvent}:{E:ip.extattrs{FS_RemediateOnEvent}}}${XC:COPY:{L:IP}:{E:address}}${XC:COPY:{L:NV}:{E:network_view}}${XC:COPY:{L:MAC}:{E:hardware}}"
      }
    },

    {
      "name": "stop_if_no_sync",
      "operation": "CONDITION",
      "condition": {
        "condition_type": "AND",
        "statements": [
            {"left": "${L::Sync}", "op": "==", "right": "false"}
        ],
        "stop": true
      }
    },

    {
       "name": "Goto for delete action",
       "operation": "CONDITION",
       "condition": {
          "statements": [
             {"left": "${E:A:operation_type}", "op": "==", "right": "DELETE"},
             {"left": "${E:A:binding_state}", "op": "==", "right": "RELEASED"},
             {"left": "${E:A:binding_state}", "op": "==", "right": "FREE"}
          ],
          "condition_type": "OR",
          "next": "DebugDelete"
       }
    },

    {
      "name": "check_for_Lease_go_for_Data",
      "operation": "CONDITION",
      "condition": {
        "condition_type": "AND",
        "statements": [
            {"left": "${E::event_type}", "op": "!=", "right": "LEASE"}
        ],
        "next": "Get Discovery Data"
      }
    },

    {
      "name": "Create Obj_Ref for Lease",
      "operation": "SERIALIZE",
      "serializations": [
        {"destination": "L:Obj_ref","content": "lease"},
        {"destination": "L:Obj_Ref_Add","content": "&address=${L:A:IP}"}
      ]
    },

    {
       "name": "Get Lease Discovery Data",
       "operation": "GET",
       "transport": {"path": "${L:A:Obj_ref}?_return_fields=discovered_data${L:A:Obj_Ref_Add}"},
       "wapi": "v2.6"
    },


    {
      "name": "Copy discovery_data for Lease",
	  "operation": "NOP",
        "body_list": [
            "${XC:COPY:{L:discovered_data}:{P:PARSE[0]{discovered_data}}}"
        ]
    },
	
    {
      "name": "jump_to_discovery_data",
      "operation": "CONDITION",
      "condition": {
        "condition_type": "AND",
        "statements": [{"left": "1", "op": "==", "right": "1"}],
        "next": "check_mac"
      }
    },
	
    {
       "name": "Get Discovery Data",
       "operation": "GET",
       "transport": {"path": "${L:A:Obj_ref}?_return_fields=discovered_data"},
       "wapi": "v2.6"
    },

        {
            "name": "check_For_Discovery_Information",
            "operation": "CONDITION",
            "condition": {
                "condition_type": "AND",
                "statements": [{"left": "${P::discovered_data}","op": "!=","right": ""}],
                "eval": "${XC:COPY:{L:discovered_data}:{P:discovered_data}}",
                "else_eval": "${XC:ASSIGN:{L:discovered_data}:{S:.}}"
            }
        },

    { "name": "check_mac", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L:A:discovered_data{mac_address}}", "op": "!=", "right": ""},
					{"left": "${L:A:MAC}", "op": "==", "right": "000000000000"}],
      "eval": "${XC:COPY:{L:MAC}:{L:discovered_data{mac_address}}}"}},


    { "name": "check_discoverer", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{discoverer}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:discoverer}:{L:discovered_data{discoverer}}}", "else_eval": "${XC:ASSIGN:{L:discoverer}:{S:.}}"}},
    { "name": "check_discovered_name", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{discovered_name}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:discovered_name}:{L:discovered_data{discovered_name}}}", "else_eval": "${XC:ASSIGN:{L:discovered_name}:{S:.}}"}},
    { "name": "check_ v_switch", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{v_switch}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:v_switch}:{L:discovered_data{v_switch}}}", "else_eval": "${XC:ASSIGN:{L:v_switch}:{S:.}}"}},

    { "name": "check_ v_host", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{v_host}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:v_host}:{L:discovered_data{v_host}}}", "else_eval": "${XC:ASSIGN:{L:v_host}:{S:.}}"}},
    { "name": "check_ v_datacenter", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{v_datacenter}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:v_datacenter}:{L:discovered_data{v_datacenter}}}", "else_eval": "${XC:ASSIGN:{L:v_datacenter}:{S:.}}"}},

    { "name": "check_ v_entity_name", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{v_entity_name}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:v_entity_name}:{L:discovered_data{v_entity_name}}}", "else_eval": "${XC:ASSIGN:{L:v_entity_name}:{S:.}}"}},
    { "name": "check_ v_adapter", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{v_adapter}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:v_adapter}:{L:discovered_data{v_adapter}}}", "else_eval": "${XC:ASSIGN:{L:v_adapter}:{S:.}}"}},
    { "name": "check_ v_entity_type", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{v_entity_type}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:v_entity_type}:{L:discovered_data{v_entity_type}}}", "else_eval": "${XC:ASSIGN:{L:v_entity_type}:{S:.}}"}},
    { "name": "check_ network_component_ip", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{network_component_ip}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:network_component_ip}:{L:discovered_data{network_component_ip}}}", "else_eval": "${XC:ASSIGN:{L:network_component_ip}:{S:.}}"}},
    { "name": "check_ network_component_name", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{network_component_name}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:network_component_name}:{L:discovered_data{network_component_name}}}", "else_eval": "${XC:ASSIGN:{L:network_component_name}:{S:.}}"}},
    { "name": "check_ network_component_port_name", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{network_component_port_name}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:network_component_port_name}:{L:discovered_data{network_component_port_name}}}", "else_eval": "${XC:ASSIGN:{L:network_component_port_name}:{S:.}}"}},
    { "name": "check_ network_component_port_description", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{network_component_port_description}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:network_component_port_description}:{L:discovered_data{network_component_port_description}}}", "else_eval": "${XC:ASSIGN:{L:network_component_port_description}:{S:.}}"}},
    { "name": "check_ device_vendor", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{device_vendor}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:device_vendor}:{L:discovered_data{device_vendor}}}", "else_eval": "${XC:ASSIGN:{L:device_vendor}:{S:.}}"}},
    { "name": "check_ device_model", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{device_model}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:device_model}:{L:discovered_data{device_model}}}", "else_eval": "${XC:ASSIGN:{L:device_model}:{S:.}}"}},
    { "name": "check_ device_type", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::discovered_data{device_type}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:device_type}:{L:discovered_data{device_type}}}", "else_eval": "${XC:ASSIGN:{L:device_type}:{S:.}}"}},

		{
			"name": "DebugDiscovery",
			"operation": "NOP",
			"body": "${XC:DEBUG:{P:}}${XC:DEBUG:{L:}}"
		},

    {
       "name": "Get User Data",
       "operation": "GET",
       "transport": {"path": "networkuser?user_status=ACTIVE&address=${L:A:IP}"},
       "wapi": "v2.6"
    },

    { "name": "check_user_response", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${P:L:PARSE}", "op": "==", "right": "0"}],
      "next": "check_username"}},

    {
        "name": "Pop User from the list",
        "operation": "VARIABLEOP",
        "variable_ops": [
           {
              "operation": "UNSHIFT",
              "type": "DICTIONARY",
              "destination": "L:user",
              "source": "P:PARSE"
          }
       ]
    },

    { "name": "check_username", "operation": "CONDITION",
      "condition": {"condition_type": "AND", "statements": [{"left": "${L::user{name}}", "op": "!=", "right": ""}],
      "eval": "${XC:COPY:{L:username}:{L:user{name}}}${XC:COPY:{L:domainname}:{L:user{domainname}}}", "else_eval": "${XC:ASSIGN:{L:username}:{S:.}}${XC:ASSIGN:{L:domainname}:{S:.}}"}},

		{
			"name": "DebugUserData",
			"operation": "NOP",
			"body": "${XC:DEBUG:{P:}}${XC:DEBUG:{L:}}"
		},


    {
      "name": "Create_FS_Asset",
      "operation": "POST",
      "body_list": [
        "<?xml version=\"1.0\" encoding=\"UTF-8\"?>",
        "<FSAPI TYPE=\"request\" API_VERSION=\"1.0\">",
        "<TRANSACTION TYPE=\"update\">",
          "<OPTIONS CREATE_NEW_HOST=\"true\"/>",
          "<HOST_KEY NAME=\"ip\" VALUE=\"${L:A:IP}\"/>",
          "<PROPERTIES>",
            "<PROPERTY NAME=\"IB_MAC\"><VALUE>${L:A:MAC}</VALUE></PROPERTY>",
            "<PROPERTY NAME=\"IB_Comment\"><VALUE>Added via IB OutboundAPI at ${L:A:SyncDate}</VALUE></PROPERTY>",
            "<TABLE_PROPERTY NAME=\"IB_Location\"><ROW>",
							"<CPROPERTY NAME=\"Site\"><CVALUE>${L::Site}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Discoverer\"><CVALUE>${L::discoverer}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Discovered name\"><CVALUE>${L::discovered_name}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Virtual Machine Name\"><CVALUE>${L::v_entity_name}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Virtual Datacenter\"><CVALUE>${L::v_datacenter}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Virtual Host\"><CVALUE>${L::v_host}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Attached Device Address\"><CVALUE>${L::network_component_ip}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Attached Device Name\"><CVALUE>${L::network_component_name} ${L::v_switch}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Attached Device Port\"><CVALUE>${L::v_adapter} ${L::network_component_port_name}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Device Vendor\"><CVALUE>${L::device_vendor}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Device Model\"><CVALUE>${L::device_model}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Device Type\"><CVALUE>${L::device_type} ${L::v_entity_type}</CVALUE></CPROPERTY>",
						"</ROW></TABLE_PROPERTY>",
            "<TABLE_PROPERTY NAME=\"IB_User\"><ROW>",
							"<CPROPERTY NAME=\"Username\"><CVALUE>${L::username}</CVALUE></CPROPERTY>",
							"<CPROPERTY NAME=\"Domain\"><CVALUE>${L::domainname}</CVALUE></CPROPERTY>",
						"</ROW></TABLE_PROPERTY>",
          "</PROPERTIES>",
        "</TRANSACTION>",
        "</FSAPI>"
      ],
      "parse": "XMLA"
    },
    {
      "name": "Check add/modify",
      "operation": "CONDITION",
      "condition": {
				"statements": [{ "left": "${P:A:PARSE{FSAPI}{STATUS}{CODE}}", "op": "!=", "right": "FSAPI_OK"}],"condition_type": "OR",
			"error": true}
    },


    {
      "name": "stop_if_Lease",
      "operation": "CONDITION",
      "condition": {
        "condition_type": "AND",
        "statements": [{"left": "${E::event_type}", "op": "==", "right": "LEASE"}],
        "stop": true
      }
    },

    {
      "name": "next_if_Fixed",
      "operation": "CONDITION",
      "condition": {
        "condition_type": "AND",
        "statements": [{"left": "${E::event_type}", "op": "==", "right": "FIXED_ADDRESS_IPV4"}],
        "next": "Update Sync Time"
      }
    },
    {
       "name": "Get HostIPv4 _ref",
       "operation": "GET",
       "transport": {"path": "record:host?ipv4addr=${L:U:IP}&network_view=${L:U:NV}"},
       "wapi": "v2.6"
    },

    {
       "name": "Get_Objref",
       "operation": "CONDITION",
       "condition": {
          "statements": [
             {"left": "${P:A:PARSE[0]{_ref}}", "op": "!=", "right": ""}
          ],
          "condition_type": "AND",
          "eval": "${XC:COPY:{L:Obj_ref}:{P:PARSE[0]{_ref}}}"
       }
    },


    {
       "name": "Update Sync Time",
       "operation": "PUT",
       "transport": {"path": "${L:A:Obj_ref}"},
       "wapi": "v2.6",
       "wapi_quoting": "JSON",
        "body_list": [
            "{",
            "\"extattrs+\":{\"FS_SyncedAt\": { \"value\": \"${L:A:SyncDate}\"}}",
            "}"
        ]
    },


    {
       "name": "Stop Create/Modify",
       "operation": "CONDITION",
       "condition": {"statements": [{"left": "1", "op": "==", "right": "1"}],"condition_type": "AND","stop": true}
    },

		{
			"name": "DebugDelete",
			"operation": "NOP",
			"body": "${XC:DEBUG:{H:}}${XC:DEBUG:{E:}}${XC:DEBUG:{I:}}${XC:DEBUG:{L:}}${XC:DEBUG:{S:}}${XC:DEBUG:{P:}}${XC:DEBUG:{UT:}}"
		},

    {
      "name": "Delete_FS_Asset",
      "operation": "POST",
      "body_list": [
        "<?xml version=\"1.0\" encoding=\"UTF-8\"?>",
        "<FSAPI TYPE=\"request\" API_VERSION=\"1.0\">",
        "<TRANSACTION TYPE=\"update\">",
          "<OPTIONS CREATE_NEW_HOST=\"true\"/>",
          "<HOST_KEY NAME=\"ip\" VALUE=\"${L:A:IP}\"/>",
          "<PROPERTIES>",
            "<PROPERTY NAME=\"IB_Delete\"><VALUE>Delete</VALUE></PROPERTY>",
          "</PROPERTIES>",
        "</TRANSACTION>",
        "</FSAPI>"
      ],
      "parse": "XMLA"
    },

    {
      "name": "check delete",
      "operation": "CONDITION",
      "condition": {
				"statements": [{ "left": "${P:A:PARSE{FSAPI}{STATUS}{CODE}}", "op": "!=", "right": "FSAPI_OK"}],"condition_type": "OR",
			"error": true}
    }

	]
}