Tuning entity assets

Entity refers to devices, asset IP address, hostname, and MAC address in your environment.

About this task

The Asset Model component in QRadar is used to track the devices and assets available in QRadar. Ensure that your asset model is updated to reflect the correct assets.

Procedure

  1. Manage Asset Auto discovery by using exclusions. See QRadar: How to effectively manage Asset Autodiscovery using exclusions.
  2. Maintain a proper blocklist and allowlist. See Asset blocklists and allowlists.
  3. Use Integrate Virtual Appliance scanner for better visibility of vulnerability information on UEBA.
  4. Select Advanced in Asset Profiler Retention Period, and set the same days (7 to 15 days) for all criteria.