Data retrieval settings for the Tenable Vulnerability Integration
Summarize
Summary of Data retrieval settings for the Tenable Vulnerability Integration
This guide details the data retrieval settings available for the Tenable Vulnerability Integration within your ServiceNow AI Platform instance. These settings enable you to define the type and scope of vulnerability data imported from Tenable products—Tenable.io, Tenable.sc, and Tenable.cs—allowing you to tailor data imports to match your organization’s security monitoring needs.
Show less
You can configure and adjust these settings through Integration Instances found under Tenable Vulnerability Integration > Integration Instances in your ServiceNow AI Platform. Each integration instance offers parameters and filters to control data import schedules, API details, and retrieval specifics.
Key Features
- Severity Filters: Control which vulnerability severities to import. Critical and high severities are enabled by default for all integrations; medium, low, and info severities are disabled by default but can be enabled as needed for more comprehensive data.
- Insert Fixed Flag: When enabled, imports new vulnerability incidents (VIs) detected in the Fixed state that are not already present in your system, ensuring that fixed vulnerabilities are tracked.
- Chunk and Page Size Controls: Parameters like size, numassets, chunksize, assetpagelimit, and vulnpagelimit allow you to define how many records are retrieved and processed in each integration run, optimizing performance and data volume management.
- Asynchronous Requests (Tenable.sc): Option to enable asynchronous API calls to prevent timeouts and improve integration efficiency. A fix script is available for existing customers to add this parameter.
- Offset Parameter (Tenable.sc): Controls the number of assets, plugins, and vulnerabilities imported per run and per API call, automatically continuing until all records are retrieved.
- Query Filters: Custom filters configured within the Tenable console can be applied during data retrieval, allowing precise targeting of vulnerability data.
Practical Application for Customers
ServiceNow customers can use these settings to customize vulnerability data imports from Tenable products based on severity levels and data volume preferences. By starting with default settings, you can gradually enable additional severities or increase record limits to suit your vulnerability management strategy and system capacity.
Adjusting the insertfixed flag ensures that fixed vulnerabilities are not overlooked, while chunk size and paging parameters help maintain efficient data handling. For Tenable.sc users, enabling asynchronous requests can alleviate API timeout issues, enhancing integration stability.
Overall, these configurable parameters empower you to optimize the integration according to organizational requirements, ensuring accurate, timely, and manageable vulnerability data flows into your ServiceNow AI Platform.
The following data retrieval settings help you determine specifically the type and scope of data you want to import from the ServiceNow® Tenable Vulnerability Integration to your ServiceNow AI Platform® instance.
The settings described in the following sections help you control the data you want to import. Additionally, you can set the values of these filters in Integration Instances. To view integration instances, navigate to and select your integration, Tenable.io, Tenable.sc, or Tenable.cs.
On the Integration Instance page that is displayed, select the Integration Instance Parameters to display a list of parameters, or the Vulnerability Integrations tabs for a schedule, REST Details, Integration details, Data Sources, and integration run information.
Common severity and retrieval settings and filters for Tenable.io, Tenable.sc and Tenable.cs in your ServiceNow AI Platform instance
The following settings are available for the Tenable.io, Tenable.sc, and Tenable.cs integrations in your ServiceNow AI Platform instance. These and other configuration settings are displayed on the Integration Instance page of your ServiceNow AI Platform instance. You may prefer to leave these settings in their defaults for the first few integration runs.
Tenable.io
- insert_fixed
- If you enable the insert_fixed flag in Setup Assistant for the Vulnerabilities Import integration, new VIs are created for detections in the Fixed state that don’t exist in your instance.
- severity_critical
- This filter is enabled by default (true) to receive critical severity Vulnerabilities from the Tenable.io Open Vulnerabilities and Tenable.io Fixed Vulnerabilities Integrations.
- severity_high
- This filter is enabled by default (true) to receive high-level severity Vulnerabilities from the Tenable.io Open Vulnerabilities and Tenable.io Fixed Vulnerabilities Integrations.
- severity_medium
- This filter is inactive by default (false). Enable this filter to receive medium-level severity Vulnerabilities from the Tenable.io Open Vulnerabilities and Tenable.io Fixed Vulnerabilities Integrations.
- severity_info
- This filter is inactive by default (false). Enable this filter to receive info-level severity Vulnerabilities from the Tenable.io Open Vulnerabilities and Tenable.io Fixed Vulnerabilities Integrations.
- severity_low
- This filter is inactive by default (false). Enable this filter to receive low-level severity Vulnerabilities from the Tenable.io Open Vulnerabilities and Tenable.io Fixed Vulnerabilities Integrations.
- size
- This setting defines the number of plugin records to include in the result set from the Tenable.io Plugins Integration. Must be in the int32 format. The default value is 1,000. The maximum size is 10,000.
- num_assets
- The maximum number of vulnerabilities per exported chunk from the Tenable.io Fixed Vulnerabilities and Tenable.io Open Vulnerabilities Integrations. The default value is 50.
- chunk_size
- Specifies the number of assets per exported chunk by the Tenable.io Assets Integration. The default is 1,000.
Tenable.sc
- async_request
- This parameter is inactive by default (false). Enable or disable this parameter to make asynchronous or synchronous API calls with Tenable.sc respectively. For synchronous calls, if there’s a timeout at 30 seconds, contact support for the Tenable product to tune the box. This parameter once enabled is applicable for all the integrations of Tenable.sc. For existing customers using asynchronous calls, a fix script is available, which adds a new async_request parameter to the existing Tenable.sc integration instances. To view the fix scripts, navigate to .
- insert_fixed
- If you enable the insert_fixed flag in Setup Assistant for the Vulnerabilities Import integration, new VIs are created fordetections in the Fixed state that don’t exist in your instance.
- offset
- Specifies the number of assets, plugins, and vulnerabilities imported in one integration run. This value also determines how many records are retrieved per API call. The integration keeps calling until all available records have been retrieved.
- Query filters
- Query filters are configured from within the Tenable console. These query filters have IDs that can be selected from Setup Assistant or from the Integration Instances page in your ServiceNow AI Platform instance. These filters are applied while retrieving the data from the Tenable.sc integrations.
- compute_severity_critical
- This filter is enabled by default (true) to receive critical severity Vulnerabilities from the Tenable.cs Open Cloud Host Vulnerabilities Integration and Tenable.cs Fixed Cloud Host Vulnerabilities Integration.
- compute_severity_high
- This filter is enabled by default (true) to receive high-level severity Vulnerabilities from the Tenable.cs Open Cloud Host Vulnerabilities Integration and Tenable.cs Fixed Cloud Host Vulnerabilities Integration.
- compute_severity_medium
- This filter is inactive by default (false). Enable this filter to receive medium-level severity Vulnerabilities from the Tenable.cs Open Cloud Host Vulnerabilities Integration and Tenable.cs Fixed Cloud Host Vulnerabilities Integration.
- compute_severity_info
- This filter is inactive by default (false). Enable this filter to receive info-level severity Vulnerabilities from the Tenable.cs Open Cloud Host Vulnerabilities Integration and Tenable.cs Fixed Cloud Host Vulnerabilities Integration.
- compute_severity_low
- This filter is inactive by default (false). Enable this filter to receive low-level severity Vulnerabilities from the Tenable.cs Open Cloud Host Vulnerabilities Integration and Tenable.cs Fixed Cloud Host Vulnerabilities Integration.
- container_severity_critical
- This filter is enabled by default (true) to receive critical severity Container Vulnerabilities from the Tenable.cs Open Cloud Container Vulnerabilities Integration and Tenable.cs Fixed Cloud Container Vulnerabilities Integration.
- container_severity_high
- This filter is enabled by default (true) to receive high-level severity Container Vulnerabilities from the Tenable.cs Open Cloud Container Vulnerabilities Integration and Tenable.cs Fixed Cloud Container Vulnerabilities Integration.
- container_severity_medium
- This filter is inactive by default (false). Enable this filter to receive medium-level severity Container Vulnerabilities from the Tenable.cs Open Cloud Container Vulnerabilities Integration and Tenable.cs Fixed Cloud Container Vulnerabilities Integration.
- container_severity_info
- This filter is inactive by default (false). Enable this filter to receive info-level severity Vulnerabilities from the Container Vulnerabilities from the Tenable.cs Open Cloud Container Vulnerabilities Integration and Tenable.cs Fixed Cloud Container Vulnerabilities Integration.
- container_severity_low
- This filter is inactive by default (false). Enable this filter to receive low-level severity Container Vulnerabilities from the Tenable.cs Open Cloud Container Vulnerabilities Integration and Tenable.cs Fixed Cloud Container Vulnerabilities Integration.
- asset_page_limit
- This setting defines the number of container asset records to include in the result set from the Tenable.cs Cloud Container Assets Integration. The default value is 1,000. The maximum size is 1,000.
- vuln_page_limit
- This setting defines the number of vulnerabilities records to include in the result set from the Tenable.cs Open Cloud Host Vulnerabilities Integration, Tenable.cs Fixed Cloud Host Vulnerabilities Integration, Tenable.cs Open Cloud Container Vulnerabilities Integration, and Tenable.cs Fixed Cloud Container Vulnerabilities Integration. The default value is 1,000. The maximum size is 10,000.