Tenable

Version: 2.0.0

Managed on-premises and powered by Nessus technology, the Tenable.sc suite of products provides the a comprehensive vulnerability coverage with real-time continuous assessment of a network. It’s a complete end-to-end vulnerability management solution.

Connect Tenable with LogicHub

  1. Navigate to Automations > Integrations.
  2. Search for Tenable.
  3. Click Details, then the + icon. Enter the required information in the following fields.
    • Label: Enter a connection name.
    • Reference Values: Define variables here to templatize integration connections and actions. For example, you can use https://www.{{hostname}}.com where, hostname is a variable defined in this input. For more information on how to add data, see 'Add Data' Input Type for Integrations.
    • Verify SSL: Select option to verify connecting server's SSL certificate (Default is Verify SSL Certificate).
    • Remote Agent: Run this integration using the LogicHub Remote Agent.
    • Server IP or Hostname: Enter Server IP or Hostname where Tenable is installed and running. Example: http://111.111.111.111:443
    • Access Key: Enter Access Key for Tenable instance.
    • Secret Key: Enter Secret key for the Tenable instance.
  4. After you've entered all the details, click Connect.

Actions for Tenable

List Scan Results

Gets the list of Scan Results.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
FieldsJinja-templated comma separated field names which needs to be returned in the result set.Required
Start TimeStart time in ISO format for scan results to be retrieved.
Example: 2019-09-26T07:58:30.996+02:00. Default is execution start time.
Required
End TimeEnd time in ISO format for scan results to be retrieved.
Example: 2019-09-26T07:58:30.996+02:00. Default is execution end time.
Required

Output

A JSON object containing multiple rows of result:

  • response: Array of reports
  • warnings: Array of any warnings
  • error_message: Any error message from the server
{
   "timestamp":1622212387,
   "warnings":[
      
   ],
   "response":{
      "usable":[
         {
            "id":"13464",
            "name":"Report Name",
            "description":"",
            "status":"Partial"
         }
      ]
   },
   "error_msg":"",
   "type":"regular",
   "error_code":0
}

Download Scan Result

Downloads a Scan Result by ID.

Input Field

Choose a connection that you have previously created and then fill in the necessary information in the following input fields to complete the connection.

Input NameDescriptionRequired
Scan IDJinja templated scan ID whose reports is to be downloaded.Required
Download TypeSelect download type. Default is V2. Valid options are: v2, diagnostic, oval, scap1 2.Required

Output

A JSON object containing multiple rows of result:

  • file_id: File ID of the downloaded report.
  • error: Error message, if any.
  • has_error: Whether the action succeeded or failed.
{
   "file_id":"b815d171c2d8409e857ce9ca43fd1523",
   "error":null,
   "has_error":false
}

Release Notes

  • v2.0.0 - Updated architecture to support IO via filesystem

© Devo Technology Inc. All Rights Reserved.