Viewing Details About Data Sources for Assets and Users
The Data Sources pages display all the data sources that contribute data to asset records and user records.
You can view metrics about each data source. You can also drill down and see which assets and which users are associated with each data source.
Lucidum connectors provide the data to your lucidum system. Connectors allow Lucidum to ingest data from your environment and discover, identify, and classify assets, data, and users. Lucidum includes pre-built connectors for the most commonly used solutions for security, vulnerability scanning, cloud, data warehouse, identity management, logs, network, endpoint management, IP management, file sharing, and devops.
Data sources map to connectors. For example, if you configure a connector for SentineOne, and Lucidum uses that connector to ingest data about an asset, then SentinelOne is listed as a data source.
Data Sources for Assets
To view data sources for assets:
Go to Data Sources (the database icon).
In the Data Sources page, click the Assets tab.
The Data Sources page displays the following for each data source associated with assets:
Asset Data Source. Name of the data source. Clicking on a link for an asset data source leads to the Assets in Data Source page, where you can view details about all asset data ingested from the data source.
Range of Records per Ingestion. The number of records Lucidum ingests from the data source per ingestion.
Count of Duplicates. Number of instances of more than one asset with a duplicate field value. Lucidum machine-learning resolves this duplicate.
Unique Assets. Number of unique assets from the data source.
Ingested Fields. Number of fields ingested from this data source. Clicking on a link for the number of ingested fields leads to the Fields in Data Source page, where you can view details about each field ingested from the selected data source.
Assets in Data Source
The Assets in Data Source page displays all the assets that use the selected data source. To view this page:
Go to Data Sources (the database icon).
In the Data Sources page, click the Assets tab.
In the Data Sources page, click the value in the Asset Data Source column.
The Assets in Data Source page appears.
The Assets in Data Source page displays the following about each asset that uses the data source:
Lucidum Asset Name. The name of the asset as it appears in Lucidum. Lucidum uses machine learning to deduplicate, triangulate, and aggregate records. The Lucidum Asset Name is a result of these machine learning tasks.
Asset Type. Lucidum asset type. For example, “server”, “container”, “vm”, or “workstation”. Lucidum uses machine learning to deduplicate, triangulate, and aggregate records. The Lucidum Asset Type is a result of these machine learning tasks.
Lucidum User Name. The user name as it appears in Lucidum. Lucidum uses machine learning to deduplicate, triangulate, and aggregate records. The Lucidum User Name is a result of these machine learning tasks.
Data Category. Lucidum data category. This value usually describes the department that is using the data, for example, “Customer Support”, “Legal”, or “Sales”. Lucidum uses machine learning to deduplicate, triangulate, and aggregate records. The Lucidum Data Category is a result of these machine learning tasks.
First Time Seen. First time Lucidum found the asset.
Last Time Seen. Most recent update by Lucidum.
Fields in Data Source
The Fields in Data Source page displays all the fields collected by the selected data source. To view this page:
Go to Data Sources (the database icon).
In the Data Sources page, click the Assets tab.
In the Data Sources page, click the value in the Ingested Fields column.
The Fields in Data Source page appears.
The Fields in Data Source page displays the following about each field collected by the data source:
Field. This column displays the list of fields that Lucidum ingests from the data source.
Non-Missing Count. Number of times that Lucidum ingested this field from the selected data source.
Missing Count. Number of times that Lucidum was unable to ingest this field from the selected data source.
Missing Percentage ( % ). Percentage of Missing Count compared to the total number of times Lucidum has ingested data from the data source.
Note that Non-Missing Count, Missing Count, and Missing Percentage do not directly correlate to the number of Lucidum assets. Lucidum ingests data at least once a day and then updates data for existing assets.
Unique Count. Number of times the field was ingested only from this data source.
Unique Percentage. Percentage of times the field was ingested only from this data source.
Minimum. For numeric fields, the maximum value ingested from the data source.
Maximum. For numeric fields, the minimum value ingested from the data source.
Data Sources for Users
To view data sources for assets:
Go to Data Sources (the database icon).
In the Data Sources page, click the Users tab.
The Data Sources page displays the following for each data source associated with users:
User Data Source. Name of the data source. Clicking on a link for a user data source leads to the Users in Data Source page, where you can view details about all user data ingested from the data source.
Range of Records per Ingestion. The number of records Lucidum ingests from the data source per ingestion.
Count of Duplicates. Number of instances of more than one user with a duplicate field value. Lucidum machine-learning resolves this duplicate.
Unique Assets. Number of unique users from the data source.
Ingested Fields. Number of fields ingested from this data source. Clicking on a link for the number of ingested fields leads to the Fields in Data Source page, where you can view details about each field ingested from the selected data source.
Users in Data Source
The Assets in Data Source page displays all the assets that use the selected data source. To view this page:
Go to Data Sources (the database icon).
In the Data Sources page, click the Users tab.
In the Data Sources page, click the value in the User Data Source column.
The Users in Data Source page appears.
The Users in Data Source page displays the following about each asset that uses the data source:
Lucidum User Name. The name of the user as it appears in Lucidum. Lucidum uses machine learning to deduplicate, triangulate, and aggregate records. The Lucidum User Name is a result of these machine learning tasks.
Lucidum Asset Name. One or more asset names associated with the user. Lucidum uses machine learning to deduplicate, triangulate, and aggregate records. The Lucidum Asset Name is a result of these machine learning tasks.
Email. The email address associated with the user.
Manager. The name of the manager associated with the user.
First Time Seen. First time Lucidum found the user.
Last Time Seen. Most recent update of the user by Lucidum.
Fields in Data Source
The Fields in Data Source page displays all the fields collected by the selected data source. To view this page:
Go to Data Sources (the database icon).
In the Data Sources page, click the Aser tab.
In the Data Sources page, click the value in the Ingested Fields column.
The Fields in Data Source page appears.
The Fields in Data Source page displays the following about each field collected by the data source:
Field. This column displays the list of fields that Lucidum ingests from the data source.
Non-Missing Count. Number of times that Lucidum ingested this field from the selected data source.
Missing Count. Number of times that Lucidum was unable to ingest this field from the selected data source.
Missing Percentage ( % ). Percentage of Missing Count compared to the total number of times Lucidum has ingested data from the data source.
Note that Non-Missing Count, Missing Count, and Missing Percentage do not directly correlate to the number of Lucidum assets. Lucidum ingests data at least once a day and then updates data for existing assets.
Unique Count. Number of times the field was ingested only from this data source.
Unique Percentage. Percentage of times the field was ingested only from this data source.
Minimum. For numeric fields, the maximum value ingested from the data source.
Maximum. For numeric fields, the minimum value ingested from the data source.