- 18 Dec 2022
- 3 Minutes to read
Examine a Device Profile
- Updated on 18 Dec 2022
- 3 Minutes to read
You can examine the details about your devices by looking at their profiles, which displays the data that Axonius collected and correlated from multiple sources.
To learn more about Device Profile, see:
To Achieve this Milestone
Search for a device and examine its profile using one of the following methods:
- Search icon on any Axonius page - to search for a specific asset.
- Devices page - run a saved query or create your own to get a desired list of devices.
Searching for Assets
The search bar enables free text search to identify and investigate a specific asset.
To search for assets:
- Click the search icon to open the search bar on any Axonius page.
- Enter the text to be searched.
When you search for a specific text, the search is executed on the main device or user attributes, including:
- Devices - asset name, host, manufacturer serial number, MAC addresses, IP addresses, last used users and tags.
- Users - mail, username, first name, last name, tag.
- The Search page opens, displaying the results in two separate tables, Devices and Users, sorted by the number of solutions discovered on the asset ('Adapter Connections' column).
- In the search page, you can:
- Investigate a specific asset - click any device or user record to review its details. For details, see Device Profile page and User Profile page.
- View the entire device or user list of results - click 'View in Devices' or 'Click in Users' will display the complete list of results. For details, see Devices page and Users page.
You can add Axonius as an "other search engine" in Google Chrome to search for assets in Axonius directly from Google Chrome address bar.
For more details, see Searching for Assets.
Running a Saved Query
The Devices page displays all the collected devices for the chosen query. The query name is displayed above the search bar.
If no query has been chosen, the page displays all collected devices.
To run a saved query:
- Open the Devices page, click icon on the left navigation panel.
Click Saved Queries on the top right corner above the query results table. The Queries page opens, displaying all the saved queries filtered by device entities.
Search for a query and click its record to view its details and then run it.
Click any device record to review its details. For details, see Device Profile page.
Click Asset Investigation to see more details about events on a specific asset.
For more details on working with saved queries, see Saved Queries.
Running your Own Query
Use the Query Wizard to create granular queries to understand how devices and users adhere to their policies.
To create and run your own query:
From the Devices page, click Query Wizard on the top right corner above the Devices table.
The popup opens enables you to add filtering expressions upon different properties of devices. You can create multiple filter expressions and decide on the logical operators between them to create complex filtering conditions.
For example, the expression below filters all devices which Windows is their operating system (OS: Type) and such devices were seen in Axonius in the last 7 days:
- The Query Wizard consists of following elements which requires the user input to create a filter expression:
- WHERE/WHERE NOT switch
- AND / OR/ AND NOT/ OR NOT switch
- NOT Flag
- Source drop-down
- Adapter drop-down
- Field drop-down
- Operator drop-down
- Value field
- Bracket controls
- To run the query, click Search.
- Click any device record to review its details. For details, see Device Profile page.
To learn more about Query Wizard elements and advanced querying, see Creating Queries with the Query Wizard.