Data retrieval settings for the Tenable Vulnerability Integration

  • Release version: Zurich
  • Updated September 5, 2025
  • 5 minutes to read
    • Summarize
    Summarized using AI
    This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete.

    Summary of Data retrieval settings for the Tenable Vulnerability Integration

    This guide explains how to configure data retrieval settings for the ServiceNow Tenable Vulnerability Integration, enabling you to control the type and scope of vulnerability data imported into your ServiceNow AI Platform instance. These settings apply to integrations with Tenable.io, Tenable.sc, and Tenable.cs and are managed via Integration Instances in your ServiceNow environment.

    Show full answer Show less

    Key Configuration Areas

    • Integration Instances: Access and configure instances for Tenable.io, Tenable.sc, or Tenable.cs under Tenable Vulnerability Integration > Integration Instances. You can adjust parameters, schedules, REST details, and view integration run info.
    • Severity Filters: Control which severity levels of vulnerabilities are imported. Critical and High severity filters are enabled by default for all Tenable integrations. Medium, Low, and Info severity filters are disabled by default and can be enabled based on your data needs.
    • Insert Fixed Flag: When enabled, vulnerabilities detected in a Fixed state that are not currently in your instance will be imported as new records.
    • Pagination and Chunk Size: Parameters like size, numassets, chunksize, and offset control the number of records fetched per API call and per integration run, allowing you to optimize performance and data volume based on your system capacity.
    • Asynchronous Requests (Tenable.sc): Optionally enable asynchronous API calls to improve integration performance. This is disabled by default and requires tuning if timeouts occur.
    • Query Filters: Configurable from the Tenable console and selectable within ServiceNow, these filters refine the data retrieved through Tenable.sc integrations.

    Specific Settings by Tenable Product

    • Tenable.io: Severity filters for Open and Fixed Vulnerabilities, plugin record size, and chunk limits for assets and vulnerabilities.
    • Tenable.sc: Async request toggle, insertfixed flag, offset for record retrieval, and query filters for precise data extraction.
    • Tenable.cs: Separate severity filters for Cloud Host and Container Vulnerabilities, with default settings enabling critical and high severities. Pagination limits for container assets and vulnerabilities are also configurable.

    Practical Benefits for ServiceNow Customers

    • Fine-grained control over the vulnerability data imported into ServiceNow, enabling prioritization based on severity and operational needs.
    • Improved integration performance through adjustable chunk sizes and asynchronous calls, helping to manage large data volumes efficiently.
    • Flexibility to include or exclude fixed vulnerabilities to maintain up-to-date asset security posture.
    • Ability to tailor data retrieval filters directly within ServiceNow or via the Tenable console for precise vulnerability management workflows.

    By leveraging these settings, ServiceNow customers can optimize how vulnerability data from Tenable products integrates into their security operations, ensuring relevant and manageable information is available for risk assessment and remediation.

    The following data retrieval settings help you determine specifically the type and scope of data you want to import from the ServiceNow® Tenable Vulnerability Integration to your ServiceNow AI Platform® instance.

    The settings described in the following sections help you control the data you want to import. Additionally, you can set the values of these filters in Integration Instances. To view integration instances, navigate to Tenable Vulnerability Integration > Integration Instances and select your integration, Tenable.io, Tenable.sc, or Tenable.cs.

    On the Integration Instance page that is displayed, select the Integration Instance Parameters to display a list of parameters, or the Vulnerability Integrations tabs for a schedule, REST Details, Integration details, Data Sources, and integration run information.

    Common severity and retrieval settings and filters for Tenable.io, Tenable.sc and Tenable.cs in your ServiceNow AI Platform instance

    The following settings are available for the Tenable.io, Tenable.sc, and Tenable.cs integrations in your ServiceNow AI Platform instance. These and other configuration settings are displayed on the Integration Instance page of your ServiceNow AI Platform instance. You may prefer to leave these settings in their defaults for the first few integration runs.

    Tenable.io

    insert_fixed
    If you enable the insert_fixed flag in Setup Assistant for the Vulnerabilities Import integration, new VIs are created for detections in the Fixed state that don’t exist in your instance.
    severity_critical
    This filter is enabled by default (true) to receive critical severity Vulnerabilities from the Tenable.io Open Vulnerabilities and Tenable.io Fixed Vulnerabilities Integrations.
    severity_high
    This filter is enabled by default (true) to receive high-level severity Vulnerabilities from the Tenable.io Open Vulnerabilities and Tenable.io Fixed Vulnerabilities Integrations.
    severity_medium
    This filter is inactive by default (false). Enable this filter to receive medium-level severity Vulnerabilities from the Tenable.io Open Vulnerabilities and Tenable.io Fixed Vulnerabilities Integrations.
    severity_info
    This filter is inactive by default (false). Enable this filter to receive info-level severity Vulnerabilities from the Tenable.io Open Vulnerabilities and Tenable.io Fixed Vulnerabilities Integrations.
    severity_low
    This filter is inactive by default (false). Enable this filter to receive low-level severity Vulnerabilities from the Tenable.io Open Vulnerabilities and Tenable.io Fixed Vulnerabilities Integrations.
    size
    This setting defines the number of plugin records to include in the result set from the Tenable.io Plugins Integration. Must be in the int32 format. The default value is 1,000. The maximum size is 10,000.
    num_assets
    The maximum number of vulnerabilities per exported chunk from the Tenable.io Fixed Vulnerabilities and Tenable.io Open Vulnerabilities Integrations. The default value is 50.
    chunk_size
    Specifies the number of assets per exported chunk by the Tenable.io Assets Integration. The default is 1,000.

    Tenable.sc

    async_request
    This parameter is inactive by default (false). Enable or disable this parameter to make asynchronous or synchronous API calls with Tenable.sc respectively. For synchronous calls, if there’s a timeout at 30 seconds, contact support for the Tenable product to tune the box. This parameter once enabled is applicable for all the integrations of Tenable.sc. For existing customers using asynchronous calls, a fix script is available, which adds a new async_request parameter to the existing Tenable.sc integration instances. To view the fix scripts, navigate to System Definition > Fix Scripts.
    insert_fixed
    If you enable the insert_fixed flag in Setup Assistant for the Vulnerabilities Import integration, new VIs are created fordetections in the Fixed state that don’t exist in your instance.
    offset
    Specifies the number of assets, plugins, and vulnerabilities imported in one integration run. This value also determines how many records are retrieved per API call. The integration keeps calling until all available records have been retrieved.
    Query filters
    Query filters are configured from within the Tenable console. These query filters have IDs that can be selected from Setup Assistant or from the Integration Instances page in your ServiceNow AI Platform instance. These filters are applied while retrieving the data from the Tenable.sc integrations.
    Tenable.cs
    compute_severity_critical
    This filter is enabled by default (true) to receive critical severity Vulnerabilities from the Tenable.cs Open Cloud Host Vulnerabilities Integration and Tenable.cs Fixed Cloud Host Vulnerabilities Integration.
    compute_severity_high
    This filter is enabled by default (true) to receive high-level severity Vulnerabilities from the Tenable.cs Open Cloud Host Vulnerabilities Integration and Tenable.cs Fixed Cloud Host Vulnerabilities Integration.
    compute_severity_medium
    This filter is inactive by default (false). Enable this filter to receive medium-level severity Vulnerabilities from the Tenable.cs Open Cloud Host Vulnerabilities Integration and Tenable.cs Fixed Cloud Host Vulnerabilities Integration.
    compute_severity_info
    This filter is inactive by default (false). Enable this filter to receive info-level severity Vulnerabilities from the Tenable.cs Open Cloud Host Vulnerabilities Integration and Tenable.cs Fixed Cloud Host Vulnerabilities Integration.
    compute_severity_low
    This filter is inactive by default (false). Enable this filter to receive low-level severity Vulnerabilities from the Tenable.cs Open Cloud Host Vulnerabilities Integration and Tenable.cs Fixed Cloud Host Vulnerabilities Integration.
    container_severity_critical
    This filter is enabled by default (true) to receive critical severity Container Vulnerabilities from the Tenable.cs Open Cloud Container Vulnerabilities Integration and Tenable.cs Fixed Cloud Container Vulnerabilities Integration.
    container_severity_high
    This filter is enabled by default (true) to receive high-level severity Container Vulnerabilities from the Tenable.cs Open Cloud Container Vulnerabilities Integration and Tenable.cs Fixed Cloud Container Vulnerabilities Integration.
    container_severity_medium
    This filter is inactive by default (false). Enable this filter to receive medium-level severity Container Vulnerabilities from the Tenable.cs Open Cloud Container Vulnerabilities Integration and Tenable.cs Fixed Cloud Container Vulnerabilities Integration.
    container_severity_info
    This filter is inactive by default (false). Enable this filter to receive info-level severity Vulnerabilities from the Container Vulnerabilities from the Tenable.cs Open Cloud Container Vulnerabilities Integration and Tenable.cs Fixed Cloud Container Vulnerabilities Integration.
    container_severity_low
    This filter is inactive by default (false). Enable this filter to receive low-level severity Container Vulnerabilities from the Tenable.cs Open Cloud Container Vulnerabilities Integration and Tenable.cs Fixed Cloud Container Vulnerabilities Integration.
    asset_page_limit
    This setting defines the number of container asset records to include in the result set from the Tenable.cs Cloud Container Assets Integration. The default value is 1,000. The maximum size is 1,000.
    vuln_page_limit
    This setting defines the number of vulnerabilities records to include in the result set from the Tenable.cs Open Cloud Host Vulnerabilities Integration, Tenable.cs Fixed Cloud Host Vulnerabilities Integration, Tenable.cs Open Cloud Container Vulnerabilities Integration, and Tenable.cs Fixed Cloud Container Vulnerabilities Integration. The default value is 1,000. The maximum size is 10,000.