.. _tagging-policy:

Applying Policy using Tags
===============================

The purpose of this function is to assign tags to targets that generate specific logs and then apply policies by creating groups based on these tags.

How to Use Tag Function
--------------------------

#. Create a tag.
#. Use :ref:`tagging-assets-create` to search for targets to tag, then assign tags.
#. Create a node group for tag assignment.
#. Apply policies using the node group.

Creating Tags
--------------

Refer to :doc:`/monitoring/network-nodes/tagging-nodes`.

Tag Assignment for Targets Searched via Search Filter
----------------------------------------------------------------

The search conditions for targets to which tags will be assigned must be precise.

#. Create a search filter by referring to :ref:`tagging-assets-create`.
#. Verification
    - Generate an audit log that matches the search filter conditions.
    - Select the created search filter and click on the IP that generated the audit log.
    - In the node list view, select the node's IP.
    - In the **Node Information** tab, confirm the tag assigned to the target.

.. note:: To delete a tag, select **Remove** instead of Tag Settings.

Creating Node Groups for Tag Assignment
--------------------------------------

Node Group Conditions:

- Item: Tag
- Condition: If exists
- Setting: [Tag Name]

Refer to :doc:`/monitoring/network-nodes/managing-nodegroups`.


Applying Policy Using Node Group
------------------------------------

Refer to :doc:`/controlling/enforcement-policy/policy-nodegroup`.

.. _Create the Tag: https://docs.genians.com/monitoring/network-nodes/tagging-nodes.html?highlight=properties#create-tag
.. _Creating Node Groups: https://docs.genians.com/monitoring/network-nodes/creating-nodegroups.html?highlight=create%20new%20policy#creating-node-groups
.. _Creating Enforcement Policy for Node Group: https://docs.genians.com/controlling/enforcement-policy/policy-nodegroup.html#creating-enforcement-policy-for-node-group