USM Anywhere™

Adding a New Sensor

Role Availability Read-Only Analyst Manager

You can add as many sensorsSensors are deployed into an on-premises, cloud, or multi-cloud environment to collect log and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation. as you need in your environment, according to your USM Anywhere license.

To check your allowed USM Anywhere Sensors

  1. Go to Settings > My Subscription to open the page.
  2. Check the allowed sensors you have and the license end date. The displayed date depends on your computer's time zone.

Note: If you want to modify your USM Anywhere License, please contact the AlienVault Sales department.

To add a new sensor

  1. Go to Data Sources > Sensors to open the page.
  2. Click New Sensor.
  3. Note: If your USM Anywhere License does not allow you to create more sensors, this button will remain inactive.

    A dialog box displays showing the authenticationProcess used to verify the identity of a user, user device, or other entity, usually through a username and password. code that you will later need for activating your sensor.

    New Sensor popup window

    Important: This code will expire in 24 hours.

    Note: While the authentication code used for the very first sensor you create begins with a "C", any additional sensors are authenticated with codes beginning with "S".

  4. Deploy the sensor following the given instructions in the Deployment Guide.
  5. Configure your USM Anywhere Sensor following the steps in the Setup Wizard. See the Setup Wizard documentation for more information.
  6. Go to Data Sources > Sensors to open the page.
  7. Check in the list of sensors that your new sensor is on the list, ready and well-configured.