- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-15-2023 05:03 PM
I was trying to use an asset tag in the filter query for bringing the vulnerabilities to service-now. I have used the following code in TenableIOVulnerabilitiesIntegration script include for the import.
--header 'X-ApiKeys: accessKey=xxxxx;secretKey=xxxxx' \
--header 'accept: application/json' \
--header 'content-type: application/json' \
--header 'Cookie: nginx-cloud-site-id=us08' \
--data '
{
"filters": {
"tag.Hadoop": ["HADOOP-ALL"],
"state": ["OPEN","REOPENED"],
"severity": ["critical"],
"plugin_id": [164630]
},
"num_assets": 1,
"include_unlicensed": false
}
'
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-16-2023 10:09 AM - edited ‎11-16-2023 01:07 PM
I had to use the script like this for /* "filters": { "tag.Hadoop": ["HADOOP-ALL"] }; */

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-16-2023 06:25 PM
Hey Liju,
Interesting use-case...
You might want to check out this Docs page here, it appears like the JSON filter can be specified / overridden directly on the REST Message, such that you may not even need to modify or customize the Script Include.
Hat tip to @chandranp and @Mark Geter for sharing this tidbit...
Check this out:
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-15-2023 10:43 PM
The attribute tag.Hadoop is ambiguous . It will work if the JSON is in below format
"filters": {
"tag":{
"Hadoop": ["HADOOP-ALL"]
},
"state": ["OPEN","REOPENED"],
"severity": ["critical"],
"plugin_id": [164630]
},
OR in rename the tag and replace the decimal with a - and then use body.filters.tag-Hadoop = ["HADOOP-ALL"]; in the script
"filters": {
"tag-Hadoop": ["HADOOP-ALL"],
"state": ["OPEN","REOPENED"],
"severity": ["critical"],
"plugin_id": [164630]
},
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-16-2023 10:09 AM - edited ‎11-16-2023 01:07 PM
I had to use the script like this for /* "filters": { "tag.Hadoop": ["HADOOP-ALL"] }; */

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-16-2023 06:25 PM
Hey Liju,
Interesting use-case...
You might want to check out this Docs page here, it appears like the JSON filter can be specified / overridden directly on the REST Message, such that you may not even need to modify or customize the Script Include.
Hat tip to @chandranp and @Mark Geter for sharing this tidbit...
Check this out:
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎11-16-2023 06:47 PM
Thanks Andy!! That works!!