Documentation Center
AlienVault® USM Anywhere™

Scheduling Asset Scans

Role Availability Read-Only Analyst   Manager

USM Anywhere provides a simple way to include scans for scheduling using its web UI.

To schedule a scan job from the asset details window

  1. Go to Environment > Assets.
  2. Next to the asset name that you want to include in an asset scan, click the icon and select Full Details.
  3. Select Actions > Schedule Scan Job to open the Schedule New Job popup window.
  4. Enter a name for identifying the job.
  5. (Optional.) Enter a description.
  6. In the Action Type field, select Asset Scanner. Depending on the USM Anywhere Sensor that you have installed, this field can include different options.
  7. Select the App Action:
  8. Select the scan profile that you want to run:

    If you want to log the results of the scan, select Set Debug Mode. This option is disabled by default.

    Note: Keep in mind that the Set Debug Mode option must be used only for debugging purposes because it needs disk space.

  9. In the Schedule field, schedule a scan to run at a set frequency. The options are Minute, Hour, Day, Week, Month, and Year. Depending on your selection, you will have different options to configure the frequency.
  10. Click Save.
  11. The job now displays in the job scheduler list.

    Note: See the Job Scheduler page for more information.

To schedule a scan job from the Job Scheduler page

  1. Go to Settings > Scheduler to open the Job Scheduler page.
  2. In the left navigation panel, click Asset Scans.
  3. Click Create Scan Job.
  4. Enter a name for identifying the job.
  5. (Optional.) Enter a description.
  6. In the Select App field, select Asset Scanner.
  7. Select a sensorSensors are deployed into an on-premises, cloud, or multi-cloud environment to collect log and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation. in case you have more than one installed.
  8. In the App Action field, select Scan.
  9. Search the assets to scan in the Asset field. You can enter the IP address or browse assets.
  10. Select the scan profile that you want to run:

    If you want to log the results of the scan, select Set Debug Mode. This option is disabled by default.

    Note: Keep in mind that the Set Debug Mode option must be used only for debugging purposes because it needs disk space.

  11. In the Schedule field, schedule a scan to run at a set frequency. The options are Minute, Hour, Day, Week, Month, and Year. Depending on your selection, you will have different options to configure the frequency.
  12. Click Save.
  13. The job now displays in the job scheduler list.

Note: See the Job Scheduler page for more information.