Searching Assets

Role Availability Read-Only Investigator Analyst Manager

USM Anywhere includes the option of searching items of interest on the page. There are several filters displayed by default. You can either filter your search or enter what you are looking for in the search field.

You can configure more filters and change which filters to display by clicking the Configure Filters link located in the upper-left side of the page. See Managing Filters for more information.

The following table lists the filters you see on the page.

Filters Displayed by Default in the Main Assets Page
Filter Name Meaning
Advanced Search Use this filter for searching a specific value of a field. See Advanced Search Filter for more information.
Stats Filter assets An IP-addressable host, including but not limited to network devices, virtual servers, and physical servers. having events Any traffic or data exchange detected by LevelBlue products through a sensor or external devices such as a firewall., alarms Alarms provide notification of an event or sequence of events that require attention or investigation., vulnerabilities, or configuration issues An identified configuration of deployed software or features of software that is in use, which is known to be insecure..
Sensor Filter assets by the associated USM Anywhere sensor Sensors are deployed into an on-premises, cloud, or multi-cloud environment to collect logs and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation..
Asset Origin Type Filter assets by who added the asset to the system.
Group Membership Filter assets by the associated group.
Instance Type (Only for the Amazon Web Services [AWS] Sensor). Filter assets by AWS Suite of cloud computing services from Amazon that make up an on-demand computing platform. instance type.
Region (Only for the AWS Sensor). Filter assets by AWS Suite of cloud computing services from Amazon that make up an on-demand computing platform. region.
Operating System Filter assets by operating system Software that manages computer hardware resources and provides common services for computer programs. Examples include Microsoft Windows, Macintosh OS X, UNIX, and Linux. (OS).
Asset Type Filter assets by asset type. See USM Accepted Asset Types for more information.

The number between brackets displayed by each filter indicates the number of items that matches the filter. You can also use the filter controls to provide a method of organizing your search and filtered results.

The following table shows the icons displayed with each filter box.

Icons Next to the Filter Title
Icon Meaning
Sort the filters alphabetically.
Sort the filters by number of items that matches them.

In the upper-left side of the page, you can see any filters you have applied. Remove filters by clicking theicon next to the filter. Or clear all filters by clicking Reset.

Selected Filters on the Assets Main Page

Note: When applying filters, the search uses the logical AND operator if the used filters are different. However, when the filter is of the same type, the search uses the logical OR operator.

Those filters that have more than 10 options include a Filter Values search field for writing text and making the search easier. If there are more than 50 search results, a icon appears to the right of the Filter Values search field. Click this icon to download a CSV containing up to 1024 results.

Filter Value Search Field