Skip to main content

How To Tag Your Data Sources

Customers can add custom and default tags to their data sources directly in the AgileBlue Cerulean AI SecOps Platform to better manage their IT infrastructure and overall attack surface.

Overview

By adding device tags, your team will have enhanced visibility and control over your assets monitored by AgileBlue. This will allow both your team and the AgileBlue analyst team to quickly identify individual assets – including your most critical assets – based on department, location, risk level, and more.

Tags can be created and removed by your team at any time, and AgileBlue may create default tag options over time as well. For multi-tenant partners, you will be able to create tags that apply to your entire environment or custom tags for individual customers/locations.

How To Create Custom Tags

  1. Log in to the AgileBlue SOC Management Portal
  2. Navigate to Data Sources on the left-hand menu
  3. Select Actions on the right-hand side, then click Tag ## Devices (this will reflect the number of data sources you have selected, but you can create new tags without first selecting a data source)

    actions
  4. On the ensuing pop-up, click New then enter the name of your new tag

  5. To save the tag, click on the Plus sign
  6. Your newly-created tag will now be available on the tags list when tagging new devices or filtering for a specific tag

How To Add & Remove Data Source Tags

  1. Navigate back to the Data Sources page and select the devices you intend to tag using the check-box on the left-hand column then click on Actions on the right-hand side followed by Tag ## Devices


     
  2. Select one or more tags from the dropdown menu, then click Submit


     
  3. On the ensuing screen, confirm the selected device are displaying the appropriate tags
    1. If you would like to remove an existing tag, click the X next to that option
  4. Once you've verified the tags for each data source, click Confirm to submit your changes

Additional Notes

  • Only administrators on your account will have the ability to add or remove tags; managers and analysts will be able to view tags only.
  • If you are logged in to a multi-tenant portal, creating tags while All is selected on the client dropdown will make that tag visible to each of your tenants. If you prefer to create a tag for a specific tenant, ensure they are selected in the dropdown menu first.
  • You are able to filter the following pages based on Tags:
    • Data Sources (display only data sources with specific tag(s) applied)
    • Cases (display only cases with one or more alerts generated by devices with specific tag(s) applied)
  • In addition to these pages, tags will be visible in the following locations:
    • Device Details
    • Alerts Details Page
    • Case Details Page
    • Response Page

Questions? Contact AgileBlue Support. 

Email: support@agileblue.com 
Phone: (216) 606-9400🚨