Documentation Center
AlienVault® USM Appliance™

Known Issue: Plugin Enabled on an Asset is Not Enabled on Sensor if Sensor Association is Changed

Reported Version: 5.3
Deployment: All deployments
AlienVault Ticket ID ENG-103974

Description

In AlienVault USM Appliance, there is a known issue that only applies to environments with more than one sensor.

When your plugin is configured for a specific asset as shown below:

In USM, when your plugin is configured for a specific asset

And the sensor associated to that asset is changed by going into Actions > Edit

Sensor associated with an asset is changed by going into actions > edit

the new sensor will not have the previous enabled plugin in /etc/ossim/agent/config.yml

Workaround

Currently, the workaround is deleting the asset and recreating it, associating it with the desired sensor. After that, new plugin changes will be correct and reflected on the sensor's /etc/ossim/agent/config.yml.