Documentation Index

Fetch the complete documentation index at: https://docs.lansweeper.com/llms.txt

Use this file to discover all available pages before exploring further.

Tenable Vulnerability Management Connector

Prev Next
Note on third‑party tools

We aim to provide accurate and helpful details about third‑party tools, but we can’t guarantee that this information is always complete or up to date. If you notice any discrepancies, feel free to share them in the feedback section below. For the most reliable information, please always refer to the third‑party tool’s official documentation.

Tenable Vulnerability Management is a leading security solution that identifies, evaluates, and prioritizes vulnerabilities to reduce risk and enhance cybersecurity.
This component allows interaction with the Tenable Vulnerability Management REST API.

Connections

Access Key and Secret Key

Authenticate requests to Tenable using an access key and secret key.

To generate API keys in Tenable Vulnerability Management:

  1. Log in to the Tenable account and navigate to My Account by selecting the user icon in the top right menu.
  2. Navigate to API Keys and select generate to generate an Access Key and a Secret Key.
  3. Enter these values into the connection configuration of the integration.
    1. Save these values as they will not be shown again.
Input Comments Default
Access Key The access key generated for the Tenable Vulnerability Management API.
Secret Key The secret key generated for the Tenable Vulnerability Management API.
User-Agent The User-Agent header sent on every request. Tenable recommends the format Integration/1.0 (NAME; BUILD; PRODUCT/VERSION). A generic default is provided; replace it with a value identifying the product. Integration/1.0 (Tenable Vulnerability Management; build; tenable-vulnerability-management/1.0)

Triggers

New Records

Checks for new assets or vulnerabilities in Tenable on a configured schedule using ID-based change detection.

Input Comments Default
Connection
Resource Type The type of resource to poll for new records.
Show New Records If true, newly detected records will be included in the output. true

Actions

Add Agent to Group

Adds an agent to the agent group.

Input Comments Default
Connection
Group ID The ID of the agent group.
Agent ID The ID of the agent to add.

Add or Remove Asset Tags

Adds or removes tags from the specified assets, and returns the UUID of the asynchronous asset update job.

Input Comments Default
Connection
Action Specifies whether to add or remove tags.
Assets An array of asset UUIDs.
Tags An array of tag value UUIDs.

Create Agent Group

Creates an agent group.

Input Comments Default
Connection
Name The name of the agent group.

Create User

Creates a new user.

Input Comments Default
Connection
Username A valid username must be in the format, name@domain, where domain corresponds to a domain approved for the Tenable Vulnerability Management instance.
Password Passwords must be at least 12 characters long and contain at least one uppercase letter, one lowercase letter, one number, and one special character symbol.
Permissions The numeric permission level to assign to the user. See Tenable API documentation for the list of permission values and their meanings.
Name The name of the user (for example, first and last name).
Email The email address of the user. A valid email address must be in the format, name@domain, where domain corresponds to a domain approved for the Tenable Vulnerability Management instance. Administrators can create users with an email address that has a domain outside of the approved domains.

Delete Agent Group

Deletes an agent group.

Input Comments Default
Connection
Group ID The ID or UUID of the agent group to delete.

Delete Asset

Deletes the specified asset.

Input Comments Default
Connection
Asset UUID The unique identifier for the asset.

Delete Scanner

Deletes and unlinks a scanner from Tenable Vulnerability Management.

Input Comments Default
Connection
Scanner ID The unique identifier for the scanner.

Delete User

Deletes a user.

Input Comments Default
Connection
User ID The unique identifier (UUID or ID) for the user.

Download Vulnerabilities

Downloads exported vulnerabilities as a JSON file.

Input Comments Default
Connection
Export UUID The UUID of the vulnerability export request.
Chunk ID The unique identifier for the chunk to export.

Export Assets

Exports all assets that match the request criteria.

Input Comments Default
Connection
Chunk Size Specifies the number of assets per exported chunk. The range is 100-10000.
Include Open Ports Specifies whether or not to include open port findings from info-level plugins. false
Filters Specifies filters for exported assets. See Tenable API documentation for more information.

Export Vulnerabilities

Exports vulnerabilities that match the request criteria.

Input Comments Default
Connection
Number of Assets Specifies the number of assets used to chunk the vulnerabilities.
Include Unlicensed Specifies whether or not to include unlicensed assets. false
Filters Specifies filters for exported vulnerabilities. See Tenable API documentation for more information.

Get Agent

Returns the specified agent details for the specified scanner.

Input Comments Default
Connection
Agent ID The unique identifier for the agent to query.

Get Agent Group

Gets details for the agent group.

Input Comments Default
Connection
Group ID The unique identifier (ID or UUID) for the agent group to query.
Fetch All When true, fetches all pages of results (Offset and Limit are ignored). When false, only the page defined by Limit and Offset is returned. true
Filter Apply a filter in the format ::. For example, field1:match:sometext would match any records where the value of field1 contains sometext. You can use multiple query filters.
Filter Type If the filter type is 'and', the record is only returned if all filters match. If the filter type is 'or', the record is returned if any of the filters match.
Wildcard Filter Text Wildcard search is a mechanism where multiple fields of a record are filtered against one specific filter string. If any one of the Wildcard Fields values matches against the filter string, then the record matches the wildcard filter. For a record to be returned, it must pass the wildcard filter (if there is one) AND the set of standard filters.
Wildcard Fields A comma-delimited subset of Wildcard Fields to search when applying the wildcard filter. If Wildcard Filter Text is provided, but Wildcard Fields is not, then all 'wildcard_fields' values are searched against the wildcard filter text.
Limit The maximum number of records to retrieve. If this parameter is omitted, Tenable Vulnerability Management uses the default value of 50.
Offset The starting record to retrieve. If this parameter is omitted, Tenable Vulnerability Management uses the default value of 0.
Sort The field to sort the results by along with the sort order. The field is specified first, followed by a colon, and the order is specified second (asc or desc).

Get Asset

Returns details of the specified asset.

Input Comments Default
Connection
Asset UUID The unique identifier for the asset.

Get Asset Vulnerability Details

Retrieves the details for a vulnerability recorded on a specified asset.

Input Comments Default
Connection
Asset ID The unique identifier for the asset.
Plugin ID The unique identifier for the plugin.
Date Range The number of days of data prior to and including today that should be returned.
Query Param Filters Filters to apply in JSON format. See Tenable API documentation for more information.

Get Plugin Details

Retrieves the details for a plugin.

Input Comments Default
Connection
Plugin ID The unique identifier for the plugin.
Date Range The number of days of data prior to and including today that should be returned.
Query Param Filters Filters to apply in JSON format. See Tenable API documentation for more information.

Get Scanner

Returns details for the specified scanner.

Input Comments Default
Connection
Scanner ID The unique identifier for the scanner.

Get User

Returns details for a specific user.

Input Comments Default
Connection
User ID The unique identifier (UUID or ID) for the user.

Import Assets

Imports asset data in JSON format.

Input Comments Default
Connection
Asset Objects An array of asset objects to import. Each asset object requires a value for at least one of the following properties: fqdn, ipv4, netbios_name, mac_address. See Tenable API documentation for more information.
Source A user-defined name for the source of the import.

Import Vulnerabilities

Imports a list of vulnerabilities in JSON format.

Input Comments Default
Connection
Vendor The company that owns the product that is the source of the vulnerability data.
Product The name of the product from the vendor.
Data Type The type of scan that identified the vulnerabilities.
Source A unique string value used to track the set of assets and vulnerabilities.
Assets An array of asset objects with vulnerabilities information. See Tenable API documentation for more information.
Coverage The coverage object. See Tenable API documentation for more information.

List Agent Groups

Retrieves a list of agent groups.

Input Comments Default
Connection

List Agents

Returns a list of agents for the specified scanner.

Input Comments Default
Connection
Fetch All When true, fetches all pages of results (Offset and Limit are ignored). When false, only the page defined by Limit and Offset is returned. true
Filter Apply a filter in the format ::. For example, field1:match:sometext would match any records where the value of field1 contains sometext. You can use multiple query filters.
Filter Type If the filter type is 'and', the record is only returned if all filters match. If the filter type is 'or', the record is returned if any of the filters match.
Wildcard Filter Text Wildcard search is a mechanism where multiple fields of a record are filtered against one specific filter string. If any one of the Wildcard Fields values matches against the filter string, then the record matches the wildcard filter. For a record to be returned, it must pass the wildcard filter (if there is one) AND the set of standard filters.
Wildcard Fields A comma-delimited subset of Wildcard Fields to search when applying the wildcard filter. If Wildcard Filter Text is provided, but Wildcard Fields is not, then all 'wildcard_fields' values are searched against the wildcard filter text.
Limit The maximum number of records to retrieve. If this parameter is omitted, Tenable Vulnerability Management uses the default value of 50.
Offset The starting record to retrieve. If this parameter is omitted, Tenable Vulnerability Management uses the default value of 0.
Sort The field to sort the results by along with the sort order. The field is specified first, followed by a colon, and the order is specified second (asc or desc).

List Agents by Group

Returns a list of agents for the specified agent group.

Input Comments Default
Connection
Agent Group ID The unique identifier for the agent group to query for agents.
Fetch All When true, fetches all pages of results (Offset and Limit are ignored). When false, only the page defined by Limit and Offset is returned. true
Filter Apply a filter in the format ::. For example, field1:match:sometext would match any records where the value of field1 contains sometext. You can use multiple query filters.
Filter Type If the filter type is 'and', the record is only returned if all filters match. If the filter type is 'or', the record is returned if any of the filters match.
Wildcard Filter Text Wildcard search is a mechanism where multiple fields of a record are filtered against one specific filter string. If any one of the Wildcard Fields values matches against the filter string, then the record matches the wildcard filter. For a record to be returned, it must pass the wildcard filter (if there is one) AND the set of standard filters.
Wildcard Fields A comma-delimited subset of Wildcard Fields to search when applying the wildcard filter. If Wildcard Filter Text is provided, but Wildcard Fields is not, then all 'wildcard_fields' values are searched against the wildcard filter text.
Limit The maximum number of records to retrieve. If this parameter is omitted, Tenable Vulnerability Management uses the default value of 50.
Offset The starting record to retrieve. If this parameter is omitted, Tenable Vulnerability Management uses the default value of 0.
Sort The field to sort the results by along with the sort order. The field is specified first, followed by a colon, and the order is specified second (asc or desc).

List Assets

Lists up to 5,000 assets.

Input Comments Default
Connection

List Assets with Vulnerabilities

Returns a list of assets with vulnerabilities.

Input Comments Default
Connection
Date Range The number of days of data prior to and including today that should be returned.
Query Param Filters Filters to apply in JSON format. See Tenable API documentation for more information.

List Asset Tags

Returns a list of assigned tags for the specified asset UUID.

Input Comments Default
Connection
Asset UUID The unique identifier for the asset.

List Asset Vulnerabilities

Retrieves a list of the vulnerabilities recorded for a specified asset.

Input Comments Default
Connection
Asset ID The unique identifier for the asset.
Date Range The number of days of data prior to and including today that should be returned.
Query Param Filters Filters to apply in JSON format. See Tenable API documentation for more information.

List Scanners

Returns the scanner list.

Input Comments Default
Connection

List Users

Returns a list of users.

Input Comments Default
Connection

List Vulnerabilities

Returns a list of recorded vulnerabilities.

Input Comments Default
Connection
Date Range The number of days of data prior to and including today that should be returned.
Query Param Filters Filters to apply in JSON format. See Tenable API documentation for more information.

List Workbench Assets

Returns a list of assets from the workbenches endpoint.

Input Comments Default
Connection
Date Range The number of days of data prior to and including today that should be returned.
Query Param Filters Filters to apply in JSON format. See Tenable API documentation for more information.

Move Assets

Moves assets from the specified network to another network.

Input Comments Default
Connection
Source Network UUID The UUID of the network currently associated with the assets.
Destination Network UUID The UUID of the network to associate with the specified assets.
Targets The IPv4 addresses of the assets to move. The addresses can be represented as a comma-separated list, a range, or CIDR.

Raw Request

Send raw HTTP request to Tenable.

Input Comments Default
Connection
URL Input the path only (/networks), The base URL is already included (https://cloud.tenable.com). For example, to connect to https://cloud.tenable.com/networks, only /networks is entered in this field.
Method The HTTP method to use.
Data The HTTP body payload to send to the URL.
Form Data The Form Data to be sent as a multipart form upload.
File Data File Data to be sent as a multipart form upload.
File Data File Names File names to apply to the file data inputs. Keys must match the file data keys above.
Query Parameter A list of query parameters to send with the request. This is the portion at the end of the URL similar to ?key1=value1&key2=value2.
Header A list of headers to send with the request.
Response Type The type of data you expect in the response. You can request json, text, or binary data. json
Timeout The maximum time that a client will await a response to its request
Retry Delay (ms) The delay in milliseconds between retries. This is used when 'Use Exponential Backoff' is disabled. 0
Retry On All Errors If true, retries on all erroneous responses regardless of type. This is helpful when retrying after HTTP 429 or other 3xx or 4xx errors. Otherwise, only retries on HTTP 5xx and network errors. false
Max Retry Count The maximum number of retries to attempt. Specify 0 for no retries. 0
Use Exponential Backoff Specifies whether to use a pre-defined exponential backoff strategy for retries. When enabled, 'Retry Delay (ms)' is ignored. false

Remove Agent from Group

Removes an agent from the specified agent group.

Input Comments Default
Connection
Group ID The ID of the agent group.
Agent ID The ID of the agent to remove.

Rename Agent

Renames an agent.

Input Comments Default
Connection
Agent ID The ID of the agent to rename.
Name The new name for the agent.

Unlink Agent

Unlinks an agent.

Input Comments Default
Connection
Agent ID The ID of the agent to unlink.

Update Agent Group

Changes the name of the agent group.

Input Comments Default
Connection
Group ID The ID or UUID of the agent group to update.
Name The name of the agent group.

Update Scanner

Updates the specified scanner.

Input Comments Default
Connection
Scanner ID The unique identifier for the scanner.
Name The new name for the scanner.
Force Plugin Update Pass 1 to force a plugin update.
Force UI Update Pass 1 to force a UI update.
Finish Update Pass 1 to reboot the scanner and run the latest software update (only valid if automatic updates are disabled).
Registration Code Sets the registration code for the scanner.
AWS Update Interval Specifies how often, in minutes, the scanner checks in with Tenable Vulnerability Management (Amazon Web Services scanners only).

Update User

Updates an existing user account.

Input Comments Default
Connection
User ID The unique identifier (UUID or ID) for the user.
Permissions The numeric permission level to assign to the user. See Tenable API documentation for the list of permission values and their meanings.
Name The name of the user (for example, first and last name).
Email The email address of the user. A valid email address must be in the format, name@domain, where domain corresponds to a domain approved for the Tenable Vulnerability Management instance. Administrators can create users with an email address that has a domain outside of the approved domains.
Enabled Specifies whether the user's account is enabled (true) or disabled (false).