Document toolboxDocument toolbox

Zombie Assets Detail View

Owned by Gary Leicht
Sept 06, 2024
4 min read

When you drill down to the detail view of the Zombie Assets by Confidence Level, the Infoblox Portal displays the following information.

Table View

  • Name: The name that was given to the asset when it was created.

  • Vendor: The name of the provider or vendor that hosts or supports the asset, such as Azure, AWS, and GCP.

  • Location: The location in which the asset resides, such as East US (Virginia), West US (California), and others.

  • Category: The type of asset, such as Load Balancer, Network, and others.

  • IP Address: The IP address of the asset.

  • Classification: The asset classification, such as Zombie Assets in this case.

  • Last Seen: The most recent time the asset was active or online.

You can also choose the following fields to be displayed in the table:

  • Asset Type: The type of asset, such as Network IP Address and others.

  • First Seen: The first time the asset was discovered.

  • MAC address: The discovered MAC address of the asset.

  • Source: The vendor from which the asset was originated.

  • Cloud Account ID: For cloud assets, this is the account ID that was given to the asset when it was first created.

  • Operating System: The operating system running on the asset.

  • Provider: The service provider or organization that provides services for the asset.

  • DHCP Fingerprint: If applicable, the DHCP fingerprint for the asset.

  • Confidence: The confidence level of the zombie asset.

  • SubClassification: The sub classification of the asset. For example, you may see Idle Load Balancer or Idle Public IP as sub classification.

  • Registration Status: The registration status of the asset. For zombie assets, this field is blank.

  • Missing Records: The records that are missing from the asset.

Data Insights Panel

In the Data Insights panel on the Detail View page, the Infoblox Portal includes mini monitors that display data for specific classification of assets. Use the down arrow in the panel to scroll down and view all mini monitors.

  • Zombie Assets by Confidence Level: This mini monitor displays the total number of zombie assets in a specific confidence level and the percent of confidence for that level.

  • Zombie Assets by Classification: This mini monitor classifies zombie assets and displays the total number of zombie assets for each classification. For example, you can see the total number of zombie assets for Idle Public IP or Detached Storage Volume.

  • Zombie Assets by Category: This mini monitor displays the total number of zombie assets and the percentage of category the zombie assets in each category. Click a specific category in the monitor and the Portal displays the zombie assets in that category in the table view.

  • Assets by Location: This mini monitor displays the distribution of zombie assets by location. You can see the percentage of zombie assets in their specific region. Click a specific region in the monitor and the Portal displays the zombie assets in that region in the table view.

  • Assets by Provider: This mini monitor displays the distribution of zombie assets by provider. You can view the percentage of zombie assets by applicable providers. Click a specific provider in the monitor and the Portal displays the zombie assets for that provider in the table view.

Calculating Zombie Assets

The Zombie Assets are calculated as follows:

The data set of "Zombie assets" are calculated based on Key Performance Indicators (KPIs) over a specific time period. The goal is to determine how the number of these assets has changed over the last 7 days.

The last 7 days are counted backward from the 27th of the month. Therefore, the time period considered is from the 21st to the 27th of the month. The specific times considered are:

  • Start: 21st at 00:00 (midnight)

  • End: 27th at 23:59 (just before midnight)

Here are the numbers of assets available on each day within this range:

  • 27th: 33 assets

  • 26th: 51 assets

  • 25th: 49 assets

  • 24th: 48 assets

  • 23rd: 47 assets

  • 22nd: 45 assets

  • 21st: 49 assets

To assess the change in assets over the last 7 days, Infoblox performs a percentage change calculation using the following formula:

 

 

In this case:

  • 1st Day of the Week (21st): 49 assets

  • 7th Day of the Week (27th): 33 assets

Plugging these values into the formula:

 

 

The result:

 

 

This result indicates that the number of assets has decreased by approximately 32.6% over the last 7 days.

Since the percentage change is negative, it shows that the asset count has reduced in the last 7 days. The calculation shows a decrease of 32.6% from the 21st to the 27th. This means that the assets have significantly decreased in number during this period, which might be a cause for concern in the context of the analysis.

 

 

Â