Documentation Center
AlienVault® USM Anywhere™

Creating an Asset Group

  Role Availability   Read-Only   Analyst   Manager

USM Anywhere supports static and dynamic asset groupsAsset groups are administratively created objects that group similar assets for specific purposes.. A static group consists of assetsAn IP-addressable host, including but not limited to network devices, virtual servers, and physical servers. that you manually assign to the group. A dynamic group is defined using rules which automatically add or remove assets from the group, based on the criteria you have defined.

By default, AlienVault creates the following dynamic asset groups

  • Assets with AlarmsAlarms provide notification of an event or sequence of events that require attention or investigation. — Asset group containing assets with alarms.
  • Assets with Vulnerabilities — Asset group containing assets with vulnerabilities.
  • Database Servers — Asset group containing database servers.
  • HIPAA — Asset group containing HIPAA assets. HIPAA is a standard for protecting sensitive patient data.
  • Linux Assets — Asset group containing Linux systems.
  • PCI DSS — Asset group containing PCI Assets.
  • Web Servers — Asset group containing web servers.
  • Windows Assets — Asset group containing Windows systems.

USM Anywhere also creates a default asset group for each AWS sensor Elastic Load Balancing (ELB)Elastic Load Balancing automatically distributes incoming application traffic across multiple Amazon EC2 instances in the cloud. instance in your environment. The AWS sensor ELB group includes the ELB instance and any AWS sensor EC2 instance connected to the load balancer and registered with the ELB service. USM Anywhere automatically discovers and enables you to collect ELB access logs if you have ELB access logging enabled.

Add Assets to Group

To create a static asset group from the assets main window

  1. Navigate to ENVIRONMENT > ASSETS.
  2. Check the box to the left of the assets you want to group. You can select all assets at the same time by checking the first box in the column.
  3. Click Actions > Add to Asset Group.
  4. Select a tab
    • Create new group. Type a name for identifying the asset group and optionally, type a description.
    • Note: The valid characters for the asset group name are uppercase letters (A-Z), lowercase letters (a-z), numerical digits (0-9), hyphens ( - ), underscore (_), and blank space. You are allowed to enter from 1 to 64 characters.

      Important: Special characters like forward slash (/), backslash (\) or ampersand (&) are not allowed. When a special character is not valid, the Save button remains inactive.

    • Add to existing group. Search the asset group in which you want to add the selected assets.
  5. Click Save.

Creating a Static Asset Group

To create a static asset group from the asset groups main window

  1. Navigate to ENVIRONMENT > ASSET GROUPS.
  2. Click Actions > Static.
  3. Type the name of the asset group. This field is required.
  4. Note: The valid characters for the asset group name are uppercase letters (A-Z), lowercase letters (a-z), numerical digits (0-9), hyphens ( - ), underscore (_), and blank space. You are allowed to enter from 1 to 64 characters.

    Important: Special characters like forward slash (/), backslash (\) or ampersand (&) are not allowed. When a special character is not valid, the Save button remains inactive.

  5. (Optional) Type a description for identifying this group.
  6. Search the assets you want to add to the group and click Add Asset or Scan Network.
  7. If you click Scan Network, type the name for a network and the CIDRClassless Inter-Domain Routing, which provides a method for allocating IP addresses, routing Internet protocol packets, and subdividing networks. CIDR notation provides a syntax for specifying a range of IP addresses. block to specify the subnet's IP Address block that you want to scan.

  8. You also can delete assets from the group by clicking the Delete icon (). You can view a specific asset by clicking the View icon ().
  9. Use the Cancel button to discard the changes.

  10. Click Save.

Creating a Dynamic Asset Group

To create a dynamic asset group from the asset groups main window

  1. Navigate to ENVIRONMENT > ASSET GROUPS.
  2. Click Actions > Dynamic.
  3. Type the name of the asset group. This field is required.
  4. Note: The valid characters for the asset group name are uppercase letters (A-Z), lowercase letters (a-z), numerical digits (0-9), hyphens ( - ), underscore (_), and blank space. You are allowed to enter from 1 to 64 characters length.

    Important: Special characters like forward slash (/), backslash (\) or ampersand (&) are not allowed. When a special character is not valid, the Save button remains inactive.

  5. (Optional) Type a description for identifying this group.
  6. Add the search criteria for the assets you want to be part of this group.
  7. Click Apply Criteria.
  8. Click Save.

Note: You can also add a dynamic asset group from the Setup Wizard, by scanning a network.