Seeking for best practice/practical solution on this requirement.
We need to ingest all severity (CRITICAL, HIGH, MEDIUM, LOW, INFO) in Tenable.io but we need to filter the INFO to specific plugin id only.
Things done so far:
- Added custom filter on HTTP request - it only ingests INFO - FAILED
- Customized script include 'TenableIOVulnerabilitiesIntegration' - it only ingests INFO - FAILED
Last resort is to ingest everything and auto-close INFO != specific plugin id using Business Rule which is not the best solution as it creates unnecessary load.
