|
1 | 1 | --- |
2 | 2 | title: Manage your OT device inventory from a sensor console |
3 | 3 | description: Learn how to view and manage OT devices (assets) from the Device inventory page on a sensor console. |
4 | | -ms.date: 07/12/2022 |
| 4 | +ms.date: 07/21/2022 |
5 | 5 | ms.topic: how-to |
6 | 6 | --- |
7 | 7 |
|
@@ -72,32 +72,76 @@ To export device inventory data, on the **Device inventory** page, select **Expo |
72 | 72 |
|
73 | 73 | The device inventory is exported with any filters currently applied, and you can save the file locally. |
74 | 74 |
|
75 | | -## Delete a device |
| 75 | +## Merge devices |
76 | 76 |
|
77 | | -If you have devices no longer in use, delete them from the device inventory so that they're no longer connected to Defender for IoT. |
| 77 | +You may need to merge duplicate devices if the sensor has discovered separate network entities that are associated with a single, unique device. |
78 | 78 |
|
79 | | -Devices might be inactive because of misconfigured SPAN ports, changes in network coverage, or because the device was unplugged from the network. |
| 79 | +Examples of this scenario might include a PLC with four network cards, a laptop with both WiFi and a physical network card, or a single workstation with multiple network cards. |
80 | 80 |
|
81 | | -Delete inactive devices to maintain a correct representation of current network activity, better understand your committed devices when managing your Defender for IoT plans, and to reduce clutter on your screen. |
| 81 | +> [!NOTE] |
| 82 | +> - You can only merge authorized devices. |
| 83 | +> - Device merges are irreversible. If you merge devices incorrectly, you'll have to delete the merged device and wait for the sensor to rediscover both devices. |
| 84 | +> - Alternately, merge devices from the [Device map](how-to-work-with-the-sensor-device-map.md) page. |
| 85 | +When merging, you instruct the sensor to combine the device properties of two devices into one. When you do this, the Device Properties window and sensor reports will be updated with the new device property details. |
82 | 86 |
|
83 | | -Devices you delete from the Inventory are removed from the map and won't be calculated when generating Defender for IoT reports, for example Data Mining, Risk Assessment, and Attack Vector reports. |
| 87 | +For example, if you merge two devices, each with an IP address, both IP addresses will appear as separate interfaces in the Device Properties window. |
84 | 88 |
|
85 | | -> [!NOTE] |
86 | | -> Devices must be inactive for 7 days or more in order for you to be able to delete them. |
87 | | -> |
| 89 | +**To merge devices from the device inventory:** |
| 90 | + |
| 91 | +1. Use the SHIFT key to select two devices from the inventory, and then right-click one of them. |
| 92 | + |
| 93 | +1. Select **Merge** to merge the devices. This can take up to 2 minutes to complete. |
| 94 | + |
| 95 | +1. When the **Set merge device attributes** dialog appears, enter a meaningful name for your merged device, and then select **Save**. |
88 | 96 |
|
89 | | -**To delete inactive devices**: |
| 97 | +## View inactive devices |
90 | 98 |
|
91 | | -1. On the **Device inventory** page, filter the grid by the **Last Activity** field. In the **Filter** field, select one of the following time periods: |
| 99 | +You may want to view devices in your network that have been inactive and delete them. |
| 100 | + |
| 101 | +For example, devices may become inactive because of misconfigured SPAN ports, changes in network coverage, or by unplugging them from the network |
| 102 | + |
| 103 | +**To view inactive devices**, filter the device inventory to display devices that have been inactive. |
| 104 | + |
| 105 | +On the **Device inventory** page: |
| 106 | + |
| 107 | +1. Select **Add filter**. |
| 108 | +1. Select **Last Activity** in the column field. |
| 109 | +1. Choose the time period in the **Filter** field. Filtering options include seven days or more, 14 days or more, 30 days or more, or 90 days or more. |
| 110 | + |
| 111 | +> [!TIP] |
| 112 | +> We recommend that you [delete](#delete-devices) inactive devices to display a more accurate representation of current network activity, better evaluate [committed devices](architecture.md#what-is-a-defender-for-iot-committed-device), and reduce clutter on your screen. |
92 | 113 |
|
93 | | - - for seven days or more |
94 | | - - for 14 days or more |
95 | | - - 30 days or more |
96 | | - - 90 days or more |
| 114 | +## Delete devices |
97 | 115 |
|
| 116 | +You may want to delete devices from your device inventory, such as if they've been [merged incorrectly](#merge-devices), or are [inactive](#view-inactive-devices). |
| 117 | + |
| 118 | +Deleted devices are removed from the **Device map** and the device inventories on the Azure portal and on-premises management console, and aren't calculated when generating reports, such as Data Mining, Risk Assessment, or Attack Vector reports. |
| 119 | + |
| 120 | +**To delete a single device**: |
| 121 | + |
| 122 | +You can delete a single device when they’ve been inactive for more than 10 minutes. |
| 123 | + |
| 124 | +1. In the **Device inventory** page, select the device you want to delete, and then select **Delete** :::image type="icon" source="media/how-to-manage-device-inventory-on-the-cloud/delete-device.png" border="false"::: in the toolbar at the top of the page. |
| 125 | +1. At the prompt, select **Yes** to confirm that you want to delete the device from Defender for IoT. |
| 126 | + |
| 127 | +**To delete all inactive devices** |
| 128 | + |
| 129 | +This procedure is supported for the *cyberx* and admin users only. |
| 130 | + |
| 131 | +1. Select the **Last Seen** filter icon in the Inventory. |
| 132 | +1. Select a filter option. |
| 133 | +1. Select **Apply**. |
98 | 134 | 1. Select **Delete Inactive Devices**. In the prompt displayed, enter the reason you're deleting the devices, and then select **Delete**. |
99 | 135 |
|
100 | | - All devices detected within the range of the selected filter are deleted. If there are a large number of devices to delete, the process may take a few minutes. |
| 136 | +All devices detected within the range of the filter will be deleted. If you delete a large number of devices, the delete process may take a few minutes. |
| 137 | + |
| 138 | +## Export device inventory information |
| 139 | + |
| 140 | +You can export device inventory information to a .csv file. |
| 141 | + |
| 142 | +**To export:** |
| 143 | + |
| 144 | +- Select **Export file** from the Device Inventory page. The report is generated and downloaded. |
101 | 145 |
|
102 | 146 | ## Device inventory column reference |
103 | 147 |
|
|
0 commit comments