USM Anywhere™

Sensors Page Overview

The Sensors page enables you to add new Sensors Sensors are deployed into an on-premises, cloud, or multi-cloud environment to collect log and other security-related data. This data is normalized and then securely forwarded to USM Anywhere for analysis and correlation., configure the deployed Sensors, delete and redeploy Sensors, and edit a Sensor for modifying the name or description. Go to Data Sources > Sensors to open the sensors main page.

Sensors Main Page

The page displays the list of Sensors you have deployed in your environment.

List of the default columns in the Sensors page
Column Field Name Description
Sensor Name Name of the deployed sensor. The type of sensor is displayed below the name.
Description Text identifying the sensor.
IP Address IP address assigned to the sensor.
Version Installed version of the sensor.
Connection Status

Status of the sensor, which can be the following:

Waiting for connection: The sensor has been added to the system but it is not connected.

Connected: The sensor is connected but is still initializing and performing configurations.

Connection lost: The sensor has lost the connection. (Logs, including NXLog messages, are cached locally and will be forwarded to USM Anywhere when the connection resumes.)

Ready: The sensor is connected and configured.

Configured Icon to indicate if the Sensor is configured () or not ().

The icon only displays when the Sensor is not configured. Use this icon to go back to the wizard and finish the Sensor configuration.

Use the icon to modify the Sensor name and/or the Sensor description. See Editing a Sensor.

Use the icon to delete the Sensor and deploy a new one, see Redeploying a Sensor. Use this button also to delete the Sensor permanently, see Deleting a Sensor.

You can also click a Sensor to display the specific information about that Sensor. See Configuring a Sensor for more information.