Assets

An Asset represents a physical or virtual monitored system. The Assets page displays a list of the Assets being monitored in your environment.

  • Click any Asset to see more detailed information about it.
  • Search for Assets at the top of the page.
  • Use the filter to filter Assets based on values in any column.

Assets are identified and added by Data Sources, which can be configured by an administrator on the Settings > Data Sources page.

  1. Navigate to Environment > Assets.
  2. Select one or more Assets. You can filter and/or search to refine the Assets displayed.
  3. Click Assign Tag.
  4. Select the Tags you want to assign and click Save at the bottom of the list.

    Note:  

    You can add and edit Tags on the Environment > Tags page.

Each time Tripwire.io receives information about an Asset from a Data Source, it uses Asset Reconciliation Rules to compare facts about that Asset with known Assets to find a match. However, if Tripwire.io accidentally creates multiple Assets for the same system, you can manually reconcile them.

  1. Navigate to Environment > Assets.
  2. Select the duplicate Assets. You can filter and/or search to refine the Assets displayed.
  3. Click Reconcile and confirm.

When you purge data for an Asset, any TSA monitoring data for that Asset is deleted. The Asset itself will not be deleted.

  1. Navigate to Environment > Assets.
  2. Select one or more Assets. You can filter and/or search to refine the Assets displayed.
  3. Click Purge Data and confirm.
  1. Navigate to Environment > Assets.
  2. Select one or more Assets. You can filter and/or search to refine the Assets displayed.
  3. Click Delete and confirm.

Asset Reconciliation

An Asset Reconciliation Rule specifies how duplicate Assets are reconciled.

Each time Tripwire.io receives information about an Asset from a Data Source, it uses Asset Reconciliation Rules to compare facts about that Asset with known Assets to find a match. If no match is found, it creates a new Asset on the Assets page. Each Asset has a unique Reconciled Asset ID, which can be used to uniquely identify an Asset across multiple Data Sources.

The Fallback Rule is used when an Asset is missing attributes and can’t be matched using existing Asset Reconciliation Rules. Assets processed with a Fallback Rule will be marked as Fallback Assets, and will never be automatically merged with other Assets.

If additional information about a Fallback Asset becomes available during a scan, the Asset will be re-processed using Asset Reconciliation Rules.

Caution:  

Be extremely careful when changing Asset Reconciliation Rules. Because they fundamentally affect the way that data from multiple Data Sources is combined, changes to these rules can drastically alter your reports.