We have “Assets” and this asset has prebuilt “properties”, like “wireless AP”, “Switch ID” and so on. My question is how is it possible to fill them automatically? We have all this information about “wireless AP” and “Switch AP” in our logs and could extract them, but I don’t see any possibility to update the Asset with it. Could it be that it is only possible to edit them manually?

Assets are missing fields

Those asset properties are populated by Vulnerability Scanner integrations. It is not possible to update that information with values parsed from an event.

Event data only contributes to identity information to the asset database like host names and MAC addresses for example. 

A bit more information about sources of asset data is shared in Sources of asset data 

It is not possible to update asset properties like "Wireless AP" using information extracted from an event like the value for the field "ap_name". You can only update those asset properties through vulnerability scanner integration or manually doing it through the GUI. 

Another option would be building your own script to update the asset through the API using the following endpoint: POST /asset_model/assets/{asset_id}. This is out of scope for JTAC support but you could engage Professional Services to help you with it if you really need to update the asset properties without using a vulnerability scanner or data from flows.