Skip to content
DeviceQuest DeviceQuest DeviceQuest Docs User Documentation

Documentation

Asset details

See everything DeviceQuest knows about one asset, and tag, mute, export, delete or deploy an agent to it.

Overview

The asset detail page brings together everything DeviceQuest knows about a single asset: its identity, risk, discovery sources, observations, collected hardware, software, network and runtime data, compliance posture and scan credentials. Open it by clicking an asset name in Asset Inventory, or from any link to an asset elsewhere in the product.

The page adapts to the asset. Tabs for collected data appear when that data exists, and assets such as hypervisors and virtual machines get an extra tab for their kind. The selected tab is kept in the address bar (?tab=…), so you can share a link to a specific tab.

Permissions:

  • assets:read: view the page.
  • assets:write: manage Tags, Mute, custom fields and comments.
  • assets:delete: Delete the asset.
  • credentials:write: assign and clear scan credentials on the Credentials tab.
  • scans:write, as an administrator: Deploy agent.
  • compliance:read: see the Compliance tab.

Screen tour

  1. Name and type: the asset name and its type, plus Muted when the asset is muted. Below it, the freshness (Current when seen in the last 24 hours, otherwise Stale), Last seen, Discovered and, for virtual machines, Hosted on with a link to the host.
  2. Identifiers: up to three primary identifiers, such as the name, hostname and IP address. Click one to copy it. The chips after them show the number of sources and the identification confidence.
  3. Risk: the risk score and level, and the Risk basis: how many sources and how much confidence the assessment rests on.
  4. Rescan: opens Scanning so you can start a scan of the asset.
  5. Tags: opens Manage tags.
  6. Mute or Unmute: suppresses or re-enables alerts for the asset.
  7. Deploy agent: installs the DeviceQuest monitoring agent on the asset over SSH. Shown to administrators.
  8. Vulnerabilities: opens Triage filtered to this asset. The badge shows the number of open vulnerabilities.
  9. Export asset as CSV: downloads the asset’s identity and risk summary as a CSV file.
  10. Copy asset name and identifier: copies the name and primary IP address.
  11. Delete: permanently deletes the asset.
  12. Tabs: the sections of the page. Tabs marked with a dot appear when the asset has data for them. See Tabs.

When some sections of the asset’s data are still loading or were interrupted, a banner at the top, Some asset detail data could not be loaded, names the affected sections. The rest of the page works normally.

Tabs

The Overview, Security & Risk, Credentials and Activity tabs are always shown. The other tabs appear when their condition is met, in this order:

TabShown when
OverviewAlways.
Hypervisor, Virtual Machine, Datacenter, Cluster, Datastore, UPS, Switch, Printer, Router, PLC or CameraThe asset’s type or recognized device type is one of these kinds. The tab is named after the kind.
HardwareHardware, BIOS, storage or GPU data has been collected, usually by a credentialed scan or an agent.
SoftwareInstalled software or services have been collected.
NetworkNetwork interfaces, open ports, routes or network neighbors have been collected.
RuntimeProcesses, user sessions, scheduled tasks or startup items have been collected.
OT / DevicesSNMP system information, switch ports, VLANs, a MAC address table, printers or printer supplies have been collected.
ComplianceThe asset causes at least one compliance control to fail or need attention, and you have compliance:read. The badge shows how many controls.
Security & RiskAlways. The badge shows the number of matched vulnerabilities.
CredentialsAlways.
ActivityAlways.

Use the arrow keys, Home and End to move between tabs.

Overview

  1. Risk posture: risk score and level with counts of Critical, High, Medium and Low vulnerabilities. All CVEs → opens Triage for this asset.
  2. Identity & classification: owner, department, warranty and lifecycle records when they exist, then Type, Primary ID, OS, Domain, First seen and Last seen.
  3. Coverage: observation confidence as a percentage, with a trend line once there are enough observations.
  4. System: the agent version, CPU, Storage, number of installed software titles and OS, when collected.
  5. Discovery sources: every source that reported the asset and when it last did.
  6. Tags: the asset’s tags. + Add tag opens Manage tags.
  7. Recent activity: the latest observations. Full history → opens the Activity tab.
  8. Top vulnerabilities: the most severe matched CVEs. All → opens the Security & Risk tab.
  9. Custom Fields: values for the custom fields your administrator has defined. See Set custom field values.
  10. Comments: notes from your team. See Comment on an asset.

Assets with a kind, such as hypervisors and virtual machines, also show a summary card for that kind at the top of the overview.

Kind tabs

Kind tabs show information specific to the kind of asset.

KindWhat the tab shows
HypervisorCluster nodes, Virtual machines (name and power state, each linked to its asset), Storage pools and Datastores. The overview card shows Platform and the number of cluster nodes and virtual machines.
Virtual MachineResources (vCPU, Memory (bytes), Disk (GB)) and Network (IP addresses, MAC addresses). The overview card shows Platform, VM ID, Power and Host.
DatacenterEverything the datacenter Contains. The overview card shows the vCenter and the number of Clusters and Hosts.
ClusterThe cluster’s Hosts. The overview card shows the Datacenter and the number of hosts.
DatastoreMounted by hosts and the Virtual machines stored on it. The overview card shows Type, Capacity and Free space.
UPSPower & Battery: battery charge, load and runtime, with the recognized device type.
Switch, Printer, Router, PLC, CameraWhat the asset is Recognized as and its Device type. Interfaces, ports and protocol details are on the Network and OT / Devices tabs.

Hardware

Collected hardware details, in sections that appear when they have data:

  • System hardware, BIOS / Firmware, Processor, Domain and Operating system.
  • Memory slots: Slot, Size (GB), Speed (MHz) and Manufacturer.
  • Storage: each disk’s Name, Type, Capacity, Interface, SMART status and whether it is Encrypted.
  • GPUs: Model, Vendor, VRAM (MB), Driver and Architecture, live Util %, VRAM Used, Power (W) and Temp (°C), and a history chart of GPU telemetry when the agent reports it.
  • Patches: installed updates with KB ID, Title and Installed date.
  • User accounts on Linux hosts.

Software

  • Installed software: Name, Version, Vendor, Installed date, Architecture and Source. Type in Filter software… to narrow the list.
  • Services: Service, Display name, Status, Startup type and Runs as. Type in Filter services… to narrow the list.

Network

  • Network interfaces: one card per interface with its status, IPv4 and IPv6 addresses, MAC address, Subnet, Gateway, DNS, DHCP, Speed, MTU, VLAN and Wireless.
  • Open ports: Port, Protocol, Service, Product, Version, State and First seen.
  • Routing table: Destination, Gateway, Interface and Metric.
  • ARP table: IP, MAC and Interface.
  • Network neighbors: neighboring devices reported by the asset, with Hostname, IP, MAC, Port and the discovery Protocol.

Runtime

  • Running processes: PID, Name, User, CPU %, Memory (MB) and Started.
  • Active sessions: User, Session type, Login time and Source IP.
  • Scheduled tasks: Name, Enabled, Last run, Next run and Runs as.
  • Startup items: Name, Location, Command and User context.

OT / Devices

Data collected over SNMP and from printers:

  • SNMP system info: Name, Description, Uptime, Contact and Location.
  • Switch ports: Interface, Description, Admin and Oper status, Speed, duplex, MAC count, VLAN and PoE.
  • VLANs: VLAN ID, Name and Status.
  • MAC address table: MAC, Interface and VLAN.
  • Printers: Name, Driver, Port, Shared, Location and Status.
  • Printer supplies: each supply’s type, level and serial number.

Compliance

Compliance posture lists the compliance controls this asset causes to fail or need attention. The summary line says how many controls across how many frameworks are affected, and when they were last evaluated.

Findings are grouped by their underlying reason, for example No owner assigned or No software inventory collected, because one fix usually clears several controls at once. Each group shows how many controls it affects, what to do about it, and each control with its severity, framework, control ID, title and status (Failing or Needs attention). Groups about vulnerabilities link to Triage for this asset. Open compliance opens the Compliance page.

Security & Risk

  • Risk score: the score and level, the remediation Priority and the Total open vulnerabilities.
  • Severity breakdown: open vulnerabilities by Critical, High, Medium and Low.
  • Matched vulnerabilities: every CVE matched to the asset with Severity, CVE ID, CVSS, Description, Match type and Status, most severe first. Click a CVE ID to open the vulnerability. Open in vulnerabilities opens Triage filtered to this asset.

Credentials

Scan credentials sets the credential each scan type uses for this asset. There is one card per scan type: WMI (Windows hosts), SSH (Linux / Unix hosts), SNMP (network devices) and Proxmox (hypervisors).

A credential assigned here overrides the schedule’s credential when the asset is scanned. Types left unset show Inherits schedule and use the schedule’s credential.

To assign a credential, choose it in the card’s list. The list shows credentials of the matching type. To go back to the schedule’s credential, click Clear. If an update fails, Credential update failed explains why.

Activity

  • Observation history: the latest 50 observations, newest first. Each shows the observation type, attribute and value, when it was observed, the source and its confidence.
  • Discovery sources: each source that reported the asset, with its last scan time, the number of observations and the attributes it provided.

Manage tags

  1. Click Tags in the header, or + Add tag on the Overview tab.
  2. Type a tag in Add a tag and click Add or press Enter. Existing tags are suggested as you type. Adding a tag keeps the existing ones.
  3. To remove a tag, click × on it under Current tags.
  4. Click Done.

  1. Current tags: click × to remove a tag.
  2. Add a tag: type a new or existing tag.

Mute or unmute the asset

  1. Click Mute.
  2. Optionally choose a Review reminder (optional): No reminder, In 7 days, In 30 days or In 90 days.
  3. Click Mute. The header shows Muted and the button becomes Unmute.

To unmute, click Unmute and confirm with Unmute.

Deploy the monitoring agent

Deploying the agent gives you full hardware, software, runtime and GPU visibility for the asset. DeviceQuest connects to the asset over SSH with a scan credential, installs the agent and enrols it.

  1. Click Deploy agent.
  2. Under Operating system, choose Linux. DeviceQuest preselects it from the asset’s detected OS.
  3. Choose an SSH credential. Credentials are managed on the Scan Credentials page.
  4. Leave Enable GPU telemetry selected to collect GPU metrics, and set the Telemetry interval (seconds). The minimum is 5 seconds; the default is 15.
  5. Click Deploy.

  1. Operating system: Linux or Windows.
  2. SSH credential: the credential used to connect.
  3. Enable GPU telemetry: collect GPU metrics.
  4. Telemetry interval (seconds): how often GPU metrics are sent.
  5. Deploy: starts the deployment.

The dialog follows the deployment through four steps: Issue credential, Connect (SSH), Install agent and Enroll + heartbeat. It usually takes up to about 90 seconds. When it finishes you see Agent deployed and enrolled.; click Done. If a step fails, the dialog shows the error.

For a Windows host, choose Windows and follow the instructions to run the install command on the host from Admin → Enroll Agent.

Set custom field values

Custom fields are defined by your administrator on the Custom Fields admin page. Each one appears in the Custom Fields card on the Overview tab.

  1. Enter or choose a value. The input matches the field type: text, number, date, true/false, or a list of options.
  2. Click Save.
  3. To change a saved value, click Edit, change it and click Save, or Cancel to keep the old value. To remove it, click Clear.

Required fields are marked Required. When any are empty, the card says how many required fields are missing.

Comment on an asset

  1. In the Comments card on the Overview tab, type in Add a comment…. Comments can be up to 2,000 characters.
  2. Click Add or press Enter.

Each comment shows its author and when it was added. Click × on a comment to delete it.

Export, copy and delete

  • Export asset as CSV downloads a two-column file (Field, Value) with the ID, name, type, first and last seen, confidence, tags, mute state, primary identifiers, risk level and score, and the count of critical, high, medium, low and total open CVEs.
  • Copy asset name and identifier copies the name, followed by the primary IP address in brackets.
  • Delete opens Delete Asset. Click Delete to remove the asset permanently, then you return to Asset Inventory.

Fields

Deploy monitoring agent

FieldDescriptionRules
Operating systemThe asset’s operating system.Linux or Windows. Preselected from the detected OS.
SSH credentialThe SSH scan credential used to connect and install.Required for Linux.
Enable GPU telemetryCollect GPU utilization, memory, power and temperature.Selected by default.
Telemetry interval (seconds)How often GPU telemetry is sent.5 or more. Default 15.

Custom field values

Field typeInput
TextFree text.
NumberA number.
DateA date picker.
Booleantrue or false.
SelectOne of the options defined for the field.

Statuses

StatusMeaningNext possible status
CurrentThe asset was seen in the last 24 hours.Stale when no new data arrives for 24 hours.
StaleThe asset hasn’t been seen for more than 24 hours.Current on the next observation.
MutedAlerts for the asset are suppressed.Removed when you click Unmute.

Vulnerability statuses on the Security & Risk tab:

StatusMeaningNext possible status
openThe vulnerability is present on the asset and nobody has started work on it.in_progress, resolved, dismissed or accepted_risk.
in_progressRemediation is under way.resolved, dismissed or accepted_risk.
resolvedThe vulnerability has been fixed on the asset.open when someone reopens it in Triage.
dismissedThe match was reviewed and dismissed, for example as a false positive.open if it is reopened.
accepted_riskThe finding is knowingly kept under an approved exception.The previous status when the exception is revoked or expires.

Keyboard shortcuts

KeyAction
← / →Move to the previous or next tab.
Home / EndMove to the first or last tab.
EnterAdd the typed tag or comment.
EscClose the open dialog.