Working with Discovered Assets

For an introduction to Asset DiscoveryThe process by which TLC scans a Manager's Audit LoggerThe TLC Console1. Tripwire Log Center Console is the software for the TLC graphic user interface (GUI), or 2. The Tripwire Log Center GUI. Through the TLC Console, you can configure TLC, oversee your TLC environment, and manage log and event data. component in which you can work with the log messages collected by TLC. File Store to identify the IP addresses of Log Sources in your TLC environment for which Monitored Assets have yet to be created in your TLC Console (a.k.a., Discovered Assets)., see What are Discovered Assets?.

This topic explains how to:

View your Discovered Assets in the TLC Console,

Create a new Monitored AssetAn object in the TLC Configuration Manager that represents a Log SourceAny log-generating application, operating-system service, database instance, or device from which TLC collects log messages. from which TLC collects log messages directly. for a Discovered AssetAn AssetA Log Source in your TLC environment. See Monitored Assets and Discovered Assets. identified by the Asset Discovery process.,

Export Discovered Asset data to a CSV, JSON, or XML file, and

Open the Audit Logger from the Discovered Assets page.

To view Discovered Assets in the TLC Console, your user account must have the following user permissions (see Working with User Permissions): 

Discovered Assets > View Assets

API > Allow REST API Logon

To create a new Monitored Asset for a Discovered Asset, your user account must have the following user permission:

Monitored Assets > Add Monitored Asset 

To work with your Discovered Assets:

1.

In the side bar, select Events >Discovered Assets.

TLC presents all of your Discovered Assets in the View Assets tab of the Discovered Assets page.

2.

To limit the View Assets tab to the Assets discovered by a specific Manager, select the Manager from the Display data for drop-down and clickRefresh.

To page through Discovered Assets, use the pagination buttons (i.e., First Page, Previous Page, Next Page, and Last Page).

To create a new Monitored Asset for a Discovered Asset:

To exclude a Discovered Asset(s) from the View Assets tab (now and in the future):

To export Discovered Assets:

a.

In the workspace, click Export Discovered Assets.

To query the Audit Logger for log messages containing the IP address of a Discovered Asset:

a.

Right-click the Discovered Asset in the workspace and selectAdd Discovered Asset to Audit Logger Filter.

TLC opens the Query Criteria tab in the Audit Logger (see Table 77). TLC auto-populates the Terms field with the Asset's IP address, and the Queried Audit Logger field is auto-populated with the Audit Logger assigned to the Discovered Asset's Manager (i.e., the Manager that generated the log messageA data record generated by a Log Source and collected by TLC. in which TLC found the Discovered Asset's IP address).