Working with Discovered Assets

For an introduction to Asset Discovery, see What are Discovered Assets?.

This topic explains how to:

View your Discovered Assets in the TLC Console,

Create a new Monitored Asset for a Discovered Asset,

Export Discovered Asset data to a CSV, JSON, or XML file, and

Open the Audit Logger from the Discovered Assets page.

To view Discovered Assets in the TLC Console, your user account must have the following user permissions (see Working with User Permissions): 

Discovered Assets > View Assets

API > Allow REST API Logon

To create a new Monitored Asset for a Discovered Asset, your user account must have the following user permission:

Monitored Assets > Add Monitored Asset 

To work with your Discovered Assets:

1. In the side bar, select Events >Discovered AssetsDiscovered Assets.

TLC presents all of your Discovered Assets in the View Assets tab of the Discovered Assets page (see Table 58).

2. To limit the View Assets tab to the Assets discovered by a specific Manager, select the Manager from the Display data for drop-down and clickRefreshRefresh.

To page through Discovered Assets, use the pagination buttons (i.e., First Page buttonFirst Page, Previous PagePrevious Page, Next Page buttonNext Page, and Last Page buttonLast Page).

To create a new Monitored Asset for a Discovered Asset:

a. Select the table row containing the Discovered Asset.
b. Right-click the Asset and select Add Monitored Asset.

To exclude a Discovered Asset(s) from the View Assets tab (now and in the future):

a. Select the table row containing the Discovered Asset.
b. Right-click the Asset and select Exclude Discovered Asset(s).

To export Discovered Assets:

a. In the workspace, click Export Discovered AssetsExport Discovered Assets.
b. Complete the Export Discovered Assets dialog and click Save.

To query the Audit Logger for log messages containing the IP address of a Discovered Asset:

a. Right-click the Discovered Asset in the workspace and selectAdd selected log message to filterAdd Discovered Asset to Audit Logger Filter.

TLC opens the Query Criteria tab in the Audit Logger (see Table 78). TLC auto-populates the Terms field with the Asset's IP address, and the Queried Audit Logger field is auto-populated with the Audit Logger assigned to the Discovered Asset's Manager (i.e., the Manager that generated the log message in which TLC found the Discovered Asset's IP address).

b. As needed, complete the Query Criteria tab and click Start.

Notes 

To assign an Audit Logger to a Manager, you must add the Audit Logger module to the Installed Modules tab of the Manager's properties dialog (see Table 42).

If the Discovered Asset's Manager is a Secondary Manager, and the Audit Logger Extension has been assigned in the Installed Modules tab of the Manager's properties dialog, TLC auto-populates the Queried Audit Logger field with the Audit Logger specified in the Audit Logger Ext tab of the Manager's properties dialog (see Table 42).

Table 58. Columns in the View Assets tab of the Discovered Assets page

Column

Description

Discovered Asset Hostname

The hostname of the Discovered Asset.

Discovered Asset IP

The IP address of the Discovered Asset.

First Seen

The date and time of the earliest log message which included the Discovered Asset's IP address.

Last Seen

The date and time of the latest log message which included the Discovered Asset's IP address.

Manager ID

The ID of the TLC Manager with the Audit Logger File Store in which the Asset was discovered.

Monitored Asset Hostname

The hostname of the existing Asset from which the log message(s) containing the Discovered Asset was collected.

Monitored Asset IP

The IP address of the existing Asset from which the log message(s) containing the Discovered Asset was collected.