Examine a Device Profile

You can examine the details about your devices by looking at their profile pages, which displays the data that OctoXLabs collected and correlated from multiple sources.

To learn more about Device Profile, see:

• Asset Profile page

• Asset Profile Page - Complex Fields

Searching for Assets

The search bar enables free text search to identify and investigate a specific asset.

To search for assets:

1. Click the search icon Searchicon to open the search bar on any OctoXLabs page.

1. Enter the text to be searched.

1. When you search for a specific text, depending on the page you're currently on, the search is executed on the main device or user attributes, including:

• Devices - Asset name, host, manufacturer serial number, MAC addresses, IP addresses, last used users and tags etc.

• Users - Mail, username, first name, last name, tags etc.

1. The search results are displayed in a table, sorted by the number of solutions discovered on the asset (by default, 'Adapters' column).

In the search page, you can:

• Investigate a specific asset - click any device or user record to review its details. For details, see Asset Profile page.

• View the entire device or user list of results - click 'View in Devices' or 'Click in Users' will display the complete list of results. For details, see Devices page and Users page.

Running a Saved Query

The Devices page displays all the collected devices for the chosen query. The query is displayed inside the search bar. If no query has been chosen, the page displays all collected devices.

To run a saved query, hover on Devices icon and from the menu, select Saved Queries.

1. Click Saved Queries in the top right corner above the query results table. The Queries page opens, displaying all the saved queries filtered by device entities.

2. Search for a query and click its record to view its details and then run it.

1. Click any device record to review its details. For details, see Asset Profile page.

Running your Own Query

Use the Query Wizard to create granular queries to understand how assets adhere to their policies.

To create and run your own query:

1. From the Devices page, click Query Wizard on the top right corner above the Devices table.

2. Use the Query Wizard to add filtering expressions on different properties of devices. You can create multiple filter expressions and decide on the logical operators between them to create complex filtering conditions.

For example, the expression below filters all devices with a Windows operating system (using OS Type field) that were seen in OctoXLabs in the last 7 days:

The Query Wizard consists of the following elements which require user input to create a filter expression:

• AND/OR switch

• NOT Flag

• Source drop-down

• Field drop-down

• Operator drop-down

• Value field

• Bracket controls

To run the query, click Search. Click any device record to review its details.

For details, see Asset Profile page.