AlienVault® USM Anywhere™

Deleting the Assets

Role Availability Read-Only Analyst   Manager

Keep in mind these points when you are deleting assets and your environment has an Amazon Web Services (AWS) Sensor, Microsoft Azure Sensor, Google Cloud Platform (GCP) Sensor, or a VMware Sensor installed:

  • USM Anywhere scans Amazon Elastic Compute Cloud (EC2) instances, VMware virtual machines (VMs),Google Compute Engine instances, and Azure VMs every 20 minutes.
  • You can disable the default scanning job and create a new one configured with a different iteration to change how frequently these assets are scanned. However, scan jobs cannot be configured to run more frequently than in 20-minute intervals.
  • You can manually delete an asset from USM Anywhere, but if the asset is still included in an AWS, Azure, GCP, or VMware environment, the asset is automatically added to your asset inventory after the following scan.
  • You can delete an asset from USM Anywhere, but if the IP address of the asset is up and running and you run an asset discovery after deleting the asset, this asset is automatically added to your asset inventory.

Important: If you terminate an Azure VM or a VMware VM, any assets that have vulnerabilities associated with them are not automatically deleted when the discovery scan finds them terminated in AWS, Azure, or VMware vCenter or vSphere.

Similarly, if you delete an AWS instance or a VM in your GCP environment but that asset still has alarms or vulnerabilities, it is not automatically deleted but instead marked "terminated".

To delete an asset from the list view

  1. Go to Environment > Assets.
  2. Next to the asset name that you want to delete, click the icon and select Delete Asset.
  3. Confirm if you want to delete the asset

  4. Click Delete to delete the assetAn IP-addressable host, including but not limited to network devices, virtual servers, and physical servers..

To delete an asset from the asset details page

  1. Go to Environment > Assets.
  2. Next to the asset name that you want to delete, click the icon and select Full Details.
  3. Click Actions > Delete Asset.
  4. Click Delete to delete the asset.

To bulk delete assets

  1. Go to Environment > Assets.
  2. Select the assets you want to delete.
    See Selecting Assets in Asset List View for more information.
  3. Click Actions > Delete Selected.
  4. A bulk delete assets

  5. Click Delete.