AlienVault® USM Anywhere™

Asset Group List View

Role Availability Read-Only Analyst Manager

USM Anywhere provides a centralized view of managing your asset groupsAsset groups are administratively created objects that group similar assets for specific purposes.. This view is on Environment > Asset Groups. It has the same look and feel as the asset list view and the functionalities are the same as well. The difference is that in this view, you are managing asset groups instead of assetsAn IP-addressable host, including but not limited to network devices, virtual servers, and physical servers..

By default, AT&T Cybersecurity creates these dynamic asset groups:

  • Assets with Agents: Asset group containing assets with Agents.
  • Assets with AlarmsAlarms provide notification of an event or sequence of events that require attention or investigation.: Asset group containing assets with alarms.
  • Assets with Vulnerabilities: Asset group containing assets with vulnerabilities.
  • Database Servers: Asset group containing database servers.
  • HIPAA: Asset group containing HIPAA assets. HIPAA is a standard for protecting sensitive patient data.
  • Linux Assets: Asset group containing Linux systems.
  • PCI DSS: Asset group containing PCI Assets.
  • Web Servers: Asset group containing web servers.
  • Windows Assets: Asset group containing Windows systems.

USM Anywhere also creates a default asset group for each AWS Sensor Elastic Load Balancing (ELB)Elastic Load Balancing automatically distributes incoming application traffic across multiple Amazon EC2 instances in the cloud. instance in your environment. The AWS Sensor ELB group includes the ELB instance and any AWS Sensor EC2 instance connected to the load balancer and registered with the ELB service. USM Anywhere automatically discovers and enables you to collect ELB access logs if you have ELB access logging enabled.

The asset groups page displays asset groups inventory and information on those asset groups. On the left you can find the search and filter options. In the upper side of the page, you can see any filters you have applied, and you have the option to create and select different views of the asset groups. The main part of the page is the actual list of asset groups. Each row describes an individual asset group.

If you want to analyze the data, you can maximize the screen and hide the filter panel. Click the icon to hide the filter panel. Click the icon to expand the filter panel.

USM Anywhere creates by default static and dynamic asset groups. See Creating an Asset Group.

Asset Group List field descriptions
Column Field Name Description
Group Name Name of the group.
Group Description Text identifying the group.

Assets

Number of assets in the group.
Asset Grouping Type of asset grouping: static or dynamic.
Created Exact date of creation of the asset group. The displayed date depends on your computer's time zone.

Next to the asset group name, click the icon to access these options:

You can also sort items by selecting 20, 50, or 100 below the result table. Some columns can be classified if you click the icons to the right side of the heading. You will sort the item information in ascending and/or descending order.

Click Generate Report to export asset groups. The management of this feature is similar to the one for assets, see Create an Assets Report for more details.

Select Actions > Static or Actions > Dynamic to create an asset group. See Creating a Static Asset Group and Creating a Dynamic Asset Group for more details.

Click the icon to bookmark an item for quick access. Clicking the icon on the secondary menu shows the bookmarked items and provides links to them.

Views

To create a view configuration

  1. From the Asset Groups list view, select the filters you want to apply.
  2. Select Save View > Save as.
  3. Enter a name for the view and click Save.
  4. The created view is already selected.

To select a configured view

  1. From the Asset Groups list view, click View above the filters.
  2. Click Saved views and select the view you want to see.
  3. Click Apply.

To delete a configured view

  1. From the Asset Groups list view, click View above the filters.
  2. Click Saved views and click the icon next to the saved view you want to delete.
  3. A dialog box displays to confirm the deletion.

    Note: You can delete the views you have created.

  4. Click Accept.
  5. Important: The icon does not display if the view is selected.