USM Anywhere provides a centralized view of your assetsAn IP-addressable host, including but not limited to network devices, virtual servers, and physical servers.. Navigate to ENVIRONMENT > ASSETS.
The assets page displays asset inventory and information on those assets. On the left you can find the search and filter options. Across the top, you can see any filters you have applied, and you have the option to create and select different views of the assets. The main part of the page is the actual list of assets. Each row describes an individual asset.
If you want to analyze the data
|Column Field Name||Description|
|Asset Name||Name of the asset|
|Agent Type||Platform of the agent|
|Agent Version||Version of the agent|
|FQDN||Fully Qualified Domain Name|
|IP address(es) for the asset|
SensorSensors are deployed into an on-premises, cloud, or multi-cloud environment to collect log and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation. name associated with the asset. The type of sensor is also displayed below the sensor name.
|Alarms||Number of alarmsAlarms provide notification of an event or sequence of events that require attention or investigation. detected on the asset|
|Events||Number of events related to the asset|
|Vulnerabilities||Number of vulnerabilities detected on the asset|
|Config Issues||Number of configuration issues related to the asset. This option is only available for AWSSuite of cloud computing services from Amazon that make up an on-demand computing platform. Sensors|
|Updated||Date on which the asset was updated. The displayed date depends on your computer's time zone|
- Find in events. Use this option to execute a search of the asset name in the Events page. See Searching Events.
- Look up in OTXThe world’s first truly open threat intelligence community. Enables collaborative defense with open access, collaborative research, seamless integration with USM Anywhere and USM Appliance, and plugin capabilities for other security products.. This option searches the IP address of the asset in the Open Threat Exchange page. See Using OTX in USM Anywhere.
- Full Details. See Viewing Assets Details for more information.
- Configure Asset. See Editing the Assets for more information.
- Delete Asset. See Deleting the Assets for more information.
- Asset Scan. This option displays or not depending on the sensor associated with the asset. See Running Asset Scans for more information.
- Assign Credentials. See Managing Credentials in USM Anywhere for more information.
- Authenticated ScanAuthenticated scans are performed from inside the machine using a user account with appropriate privileges.. This option displays or not depending on the sensor associated with the asset. See Running Authenticated Asset Scans for more information.
- Configuration IssuesAn identified configuration of software deployed, or features of software in use, which is known to be insecure.. This option goes to the asset
sdetails page. The page will have the Configuration Issues tab selected. See Viewing Assets Details for more information.
- Vulnerabilities. This option goes to the asset
sdetails page. The page will have the Vulnerabilities tab selected. See Viewing Assets Details for more information.
- Alarms. This option goes to the asset
sdetails page. The page will have the Alarms tab selected. See Viewing Assets Details for more information.
- EventsAny traffic or data exchange detected by AlienVault products through a Sensor, or through external devices such as a firewall.. This option goes to the asset
sdetails page. The page will have the Events tab selected. See Viewing Assets Details for more information.
The padlock you can see next to the asset indicates whether the asset has a credential assigned () or not ().
You can also sort items by selecting 20, 50, or 100 below the result table.
Choose the view you want in layout. You can see the assets in a list view or in a grid view.
Click Generate Report to export
Click Actions > Quick or Actions > Advanced to create a new asset. See Adding Assets Manually in the UI for further details.
The Actions button includes more options. Select one or more assets (Selecting Assets in Asset List View) to active these options
- Delete selected, see Deleting the Assets for further details.
- Edit Fields, see To assign asset fields to a group of assets for further details.
- Assign Credentials, see Managing Credentials in USM Anywhere for further details.
- Assign Agent Profile, see Assigning AlienVault Agent Configuration Profiles to Assets for further details. This option is available for users whose role is Manager.
- Set Sensor, see To assign a sensor to an asset or a set of assets for further details.
- Set Compliance Scope, see Working with Assets and PCI DSS for further details.
- Add to Asset GroupAsset groups are administratively created objects that group similar assets for specific purposes., see Creating an Asset Group for further details.
- Manage Columns, see Configuring Columns for further details.
Check the box to the left of an asset to select that asset. You can select all assets at the same time by checking the first box in the column.
Click the star symbol to the left of an item to mark it as a bookmark for quick access. Clicking the Star icon () on the secondary menu shows the bookmarked items and a link to them.
You can configure the columns/fields that display in the list and save your columns configuration to get back to it whenever you need it.
- From the
assetslist view, click Actions > Manage Columnsto open the Columns Configuration popup window.
the columns you want to have in the list view. You can type your search in the search box.
Use the icons () and () to pass the items from one column to the other and select the columns you want to see.
- Click Apply.
Note: If you export a report when you have set custom columns, your report will keep the columns you have configured.
Important: If you want to keep your configuration, you need to save it by clicking the pull-down menu Save View > Save as. Otherwise, your custom view will not be kept when you move to another feature.
To create a view configuration
From the Assets list view, click Actions > Manage Columns .
- Use the icons () and () to pass the items from one column to another and select the columns you want to see.
- Click Apply.
- If you want to delimit the search, select the filters you want to apply.
- Click the pull-down menu Save View > Save as.
- Type a name for the view and click Save.
To select a configured view
- From the
Assetslist view, click the View pull-down menu above the filters.
- Click Saved views and select the view you want to see.
- Click Apply.