Working with assets

This topic provides instructions on viewing a list of assets with identified vulnerabilities and missing patches, mapping assets to an endpoint, viewing discovered assets, and searching for more information using filters. 

To learn more about assets, see Assets

Viewing assets with missing patches

On Assets > Managed Assets page, view the following details:

  • The total number of impacted assets appears near the tab title. 
  • Host name, IP address, operating system, and number of unique missing patches for an asset.  
  • To search for an asset, enter a search term, and click Search.
    You can search using the host name, IP address, or operating system. 

To view the list of unique missing patches for any asset, do the following:

  1. Click the link against any asset in the Missing Patches column. 
    The Risks > Missing Patches page shows the unique missing patches, patch age, severity, classification, and CVE IDs for each missing patch for the particular asset. 
  2. Click Clear Filters to view all unique missing patches across all assets. 
    To view more information about the missing patches, see Working with risks.

Viewing assets from a vulnerability scan

On the Assets > Scanned Assets page, view the following details: 

  • Total number of assets imported from a scan appears near the tab title.
  • Host name, IP address, status, source, operating system, and vulnerabilities identified for each asset. 

To view a list of vulnerabilities identified for an asset, do the following: 

  1. Click the link against any asset in the Vulnerability column.
    The Risks > Vulnerabilities page shows the vulnerabilities and their details. 
  2. Click Clear Filters to view all vulnerabilities imported from the latest scan. 
    To view more information about vulnerabilities, see Working with risks.

To search for an asset, enter a host name or IP address, and click Search

Mapping and unmapping assets

On the Assets > Scanned Assets page, do the following: 

  1. Select an asset and click Map.

  2. Select an endpoint and save changes.
    The asset status changes to Mapped and the mapped endpoint appears under the asset host name. 

To remove mapping, select one or more assets with the status as Mapped, and click Remove Mapping. You cannot remove mapping for assets for which a remediation operation is created and scheduled. 

Adding tags to assets

In BMC Helix Automation Console (SaaS), you can add tags. In TrueSight Automation Console (on-premises), you must upgrade to 20.02.01: Patch 1 for TrueSight Automation Console 20.02 to use tags. 

On the Assets > Scanned Assets page, do the following:

  1. Click Export to get the assets data into a CSV file. 
    OR
    Go to Advanced Search option, select Upload tags metadata, and download the CSV template. 
  2. In the CSV file, add tag keys and values to be associated with the assets in the new Tags column, in a key:value format. 
    OR
    If using a template, provide data for assets, and add tag keys and values in the Tags column, in a key:value format. 
    For example, the CSV template is in the following format, in which you provide the asset data and tags:  

    Asset ID

    Scanned Hostname

    Scanned IP Address 

    Tags

    <asset_name>

    <hostname>

    <IP_address>

    LOCATION: Pune; OWNER: Admin

    <asset_name>

    <hostname>

    <IP_address>

    LOCATION: USA; OS: Redhat Linux

    Best practices for adding tags

    - To add more than one key:value pair, use a semi-colon to separate the list.

    - You can add more than one value for a particular key in a key:value pair format.
    Example: LOCATION: Pune; LOCATION: Austin

    - Tag values provided in the CSV file overwrite the values on the Scanned Assets page.

  3. In the Advanced Search option, select Upload tags metadata.

  4. Attach the updated CSV file, and then click Upload.
  5. Go to Advanced Search and click Tags to view the list of added tags and choose one or more tags to view assets based on the selected tags.

Removing tags

To remove tags, delete the single or multiple key:value pair(s) in the exported CSV file, and then upload the same file back in Automation Console.

You can remove tags in BMC Helix Automation Console (SaaS) and TrueSight Automation Console (on-premises) version 20.02.01 only.

Viewing assets from BMC Discovery

On the Assets > Discovered Assets page, view the following details:

  • The key performance indicators (KPIs) show the following information: 
    • Total Discovered Assets: Total number of discovered assets by BMC Discovery.
    • Unmanaged Assets: Total number of assets that are found by BMC Discovery, but are not mapped to endpoints in TrueSight Server Automation.
    • Unscanned Assets: Total number of assets, either discovered, or mapped in Server Automation, but not yet scanned for vulnerabilities. For BMC Helix Automation Console,  If an auto-mapped asset is unmapped from the Scanned Assets page, it gets counted in the Unscanned Assets. 
  • To view all assets for a category, click the KPI link. 
    For example, if you click Total Discovered Assets, all assets discovered by BMC Discovery appear in the list. 
  • Host name, IP address, and the operating system for the assets. 
  • To search for an asset, enter a search term, and click Search.
    You can search using the host name, IP address, or operating system of the asset. 
  • If you want to remove an asset, remove it first from TrueSight Server Automation and then from BMC Discovery. This change gets reflected in Automation Console based on the Data Refresh Cycle configured on the Administration > Service Account page. 

Why do I not see any data on the Discovered Assets page after installing Automation Console?

To view discovered assets, you must ensure that the BMC Discovery connector is configured after the installation. For more information, see Configuring the BMC Discovery connector.

Performing an advanced search

On the Assets > Managed Assets page, do the following: 

  1. Click Advanced Search and choose one or more of the following options:

    • Unique Missing Patch
    • Operating System
    • Asset
  2. Click Clear Filters to go back and view unfiltered data. 

On the Assets > Scanned Assets page, do the following: 

  1. Click Advanced Search and choose one or more of the following options:

    • Operating System
    • Asset
    • Status
    • Source
    • Vulnerability Name
    • Tag (available in BMC Helix Automation Console (SaaS) 20.02 Patch 1 and TrueSight Automation Console (on-premises) 20.02 Patch 1 only) 
  2. Click Clear Filters to go back and view unfiltered data. 

On the Assets > Discovered Assets page, do the following: 

  1. Click Advanced Search and choose one or more of the following options:

    • Asset
    • Operating System
  2. Click  Clear Filters to go back and view unfiltered data. 


Was this page helpful? Yes No Submitting... Thank you

Comments