USM Anywhere™

Advanced Search Filter

Role Availability Read-Only Analyst Manager

The Advanced Search filter enables you to enter a search value on a selected field.

The following table shows the filter fields that you can find in the first drop-down list.

Advanced Search Fields (First Drop-Down List)
Filter Name Meaning
Name Filter assets by the name of the asset.
Description Filter assets by the asset description.
UUID Filter assets by the universally unique identifier (UUID).
IP/CIDR Filter assets by IP and Classless Inter-Domain Routing (CIDRClassless Inter-Domain Routing, which provides a method for allocating IP addresses, routing Internet protocol packets, and subdividing networks. CIDR notation provides a syntax for specifying a range of IP addresses.). This is a method for allocating IP addresses and routing IP packets. It is the range of IP addresses that define the network.
FQDN Filter assets by Fully Qualified Domain Name (FQDN).
Asset Type Filter assets by asset type.
Instance Type Filter assets by instance type.
Region Filter assets by region.
Operating System Filter assets by operating system.
Service Filter assets by service.
Software Filter assets by software.
Associated Plugin Filter assets by the plugin associated to the asset.
Alarm Counter Filter assets by the number of alarms.
Event Counter Filter assets by the number of events.
Vulnerability Counter Filter assets by the number of vulnerabilities.
Configuration Issue Counter Filter assets by the number of configuration issues.
PCI Asset Filter assets by Payment Card Industry (PCI) Asset, if the asset is included or not in the PCI Data Security Standards (DSS) Asset Group. See Asset Group List View and Working with Assets and PCI DSS for more information.
HIPAA Asset Filter assets by Health Insurance Portability and Accountability Act (HIPAA) Asset, whether the asset is included in the HIPAA Asset Group. See Asset Group List View for more information.
Custom User Fields Filter assets by the fields you have created. If you have not created fields, this filter does not display.

Note: The result of a search when you use the Alarm Counter filter or the Event Counter filter depends on if an alarm or an event can identify the source or destination as an asset in the inventory. Your environment can have alarms or events associated with assets both included in the inventory and those not included in the inventory. Assets included in the inventory display their names in blue, and assets not included in the inventory display their names in gray. The alarm and event counter filters only count the identified (blue) assets.

View of assets in the inventory (blue) and assets not in the inventory (grey)

Important: The alarm and event counts are not updated in real time but are calculated every hour. If the counts are not updated, it can happen because new events or alarms are in your environment after the last count.

The following table shows the operators that you can find in the second drop-down list.

Advanced Search Fields (Second Drop-Down List)

Operator Meaning
> Greater than.
>= Greater than or equal to.
< Less than.
<= Less than or equal to.
Equal Equal to.
IP Range Range of IP addresses.
Is Empty Include assets with no IP addresses. This operator is available only for IP/CIDR.
Is Not Empty Include assets with IP addresses. This operator is available only for IP/CIDR.
Like Search for the specified pattern.
Not Equal

Not equal to.

Important: Some filters don't include the NOT operator (for example, Services or Software).
Not Like Not true.

To search assets using the advanced search filter

  1. Go to Environment > Assets.

  2. Below Advanced Search filter, click Add Filter.

    Advanced Search on the Asset Main Page

  3. Select a field from the first drop-down list.

    Advanced Search on the Asset Main Page

    See Advanced Search Fields (First Drop-Down List) for more information.

  4. Select an operator from the drop-down list.

    Important: Depending on the field you have chosen in the first drop-down list, the operators vary.

    Advanced Search on the Asset Main Page

    See Advanced Search Fields (Second Drop-Down List) for more information.

  5. Enter the search value.

    6. If you want to search for an exact phrase having two or more words, you need to put quotation marks around the words in the phrase. This includes email addresses (for example, "bob@mycompany.com").

  6. Click the icon.
  7. Click Add Filter if you want to add a new search.
  8. Click the icon.
  9. Click Apply.

The result of your search displays with the assets identified.