Assets

The Assets page, listed under Investigate in the Alert Logic console, provides an interactive view of every asset that Alert Logic has discovered in your environment. This list of assets includes every Alert Logic appliance, cloud host, data center device, or other host where the Alert Logic agent has been installed. Each asset includes metadata, such as host names, IP addresses, and its relation to other assets. The Assets page is a convenient place to search for hosts by name or IP address, to help you quickly assess your security posture and Alert Logic’s security findings.

Several actions can be performed using the assets page, including:

  • Defining groups of assets
  • Setting the Alert Logic protection level for an asset
  • Creating or modifying scan schedules
  • Configuring health notifications for an asset
  • Performing an expedited host scan

Information about detected incidents, exposures, and health issues is shown for each protected asset. Useful data about protection state, such as the date of the last vulnerability scan and recent log collection volume, is also available. The Asset page helps you navigate the rich security data Alert Logic has collected by providing links from each asset to associated log messages, incidents, exposures, and health issues.

Asset types

The Assets page provides data about the following asset types:

  • Hosts (including Alert Logic appliances)
  • Subnets
  • Networks (including AWS VPCs and Azure VNets)
  • Regions
  • Deployments

Asset data for each asset type is organized in a list, and a detailed asset view is available for each known asset.

Asset lists

The default view in the Assets page is the Hosts list. To view information about subnets, networks, regions, or deployments, click on the appropriate tab at the top of the page. Each tab uses a common set of controls and provides data specific the selected asset type.

Searching and filtering

You can quickly search for an asset by name or associated IP address by selecting the search box in the upper left-hand corner of the page, next to the magnifying glass icon ().

Click the Filters button to show additional filters that can be applied to asset data. Most asset types support filtering by protection level, asset group, and health status. Additional filters are available depending on the asset type. To apply a filter, click on the filter name and select one or more available values. Click Apply to filter the current asset list using the selected values of this filter. Multiple filters can be applied to an asset list. To disable a single filter, click on the filter name and click Clear. To disable all filters, click the Clear All button to the right of the Filters button.

Selecting and reordering columns

Click the column selection icon () to view the list of available columns for the current asset list. The asset name is always selected and fixed in the first position. Check or uncheck columns to show or hide them from the asset list. Hover over the a column name and click and drag to re-order columns. Click Apply to save your changes or Cancel to discard them.

The selected columns and column order for each asset list are saved in your web browser and loaded when you next view the Assets page.

Sorting and navigating the asset list

Click a column header to sort the visible assets using that column. Click again to change between ascending and descending sort order, as indicated by the up or down arrow next to the column title.

Some columns, such as the Health Breakdown, Exposure Breakdown, and Open Incidents Breakdown include multiple severity values for a single asset. These data are sorted on a per-asset basis, first by the number of critical-severity items, then by the number of high-severity items, and so forth.

If the total width of the currently selected columns is wider than your web browser, you can scroll to view additional columns. The asset name column is always visible as the leftmost column.

The total number of filtered assets in the current list is visible in the lower left corner of the page. Use the controls in the bottom right to change the number of assets per page and to change the currently visible page.

Viewing asset data

Clicking on an asset name will open the asset details page for that asset. To show an expanded preview of a single asset without leaving the asset list, click any of the other columns to show a preview of asset data. Hovering over icons displayed in the asset list to view the description of any visual elements, such as the appliance icon in the host type column.

Performing actions on assets

Take additional configuration and navigation actions using the actions menu () to the left of the asset name. The actions available are based on the asset type and status. For example, you can add protection to an unprotected host, but you can’t create a scan schedule for that host until it has been protected.

To perform action on more than one asset:

  1. Select multiple assets using the check boxes next to each asset name.
  2. When two or more assets have been selected, the Bulk Action button will become visible.
  3. Click the Bulk Action button and select an available action.

To select all assets in the current list, click the check box in the heading row of the asset list. Alternatively, click the Select All Results button when the Bulk Action button is visible. The selection only applies to currently filtered asset but does apply to assets on pages other than the active page.

You can perform a bulk action on all assets in an asset group by applying an Asset Group filter, selecting all assets, and using the Bulk Action button.