Queries

The Queries page gives you a centralized view of all saved queries available to you. Use it to browse, manage, and monitor queries, and view query-based widgets on individual query profiles. Selecting a query opens the query profile, where you can review its details and widgets.

Queries Table

Each row in the Queries table represents a saved query and includes:

Column Description
Name The name of the saved query.
Category The category selected when the query was saved (for example, Compute, Containers, or Data).
Scope The main scope of the query, such as a specific cloud provider or environment.
Visibility Whether the query is Public (visible to everyone in the organization) or Private (visible only to the creator).
Monitored Whether Tenable is capturing daily snapshots of query results. Monitored queries display widgets on the query profile.
Modified By The last user who updated the query. Built-in queries always display Tenable.
Modification Time The most recent time the query was updated.
Favorite A star icon you can toggle to mark frequently used queries.

You can mark a query as a favorite using the star icon and filter by Favorite to find it quickly.

Open a Query in Explorer

You can open any saved query in Explorer to run it or adjust its configuration.

To open a query:

  1. Go to Explore > Queries.
  2. Find the query you want to run.
  3. Select the row, or open the three-dot menu and choose Go to Explorer.

The Explorer page loads with the selected query applied. From there, you can modify filters, relationships, and other settings, and then use Save or Save As as needed. To learn more, see Save a Query.

Monitor a Query

Monitoring a query tells Tenable to capture a daily snapshot of results starting from when you enable monitoring. This historical data is displayed as widgets on the query profile and is available in the widget bank for use in custom dashboards.

You can enable monitoring when saving a query in the Explorer.

Query Widgets

Each query profile includes a Widgets tab showing the widgets available for that query. Widgets reflect historical data captured through monitoring and vary by query type.

Query Type Widgets
All queries Item Count, Table
Cloud/IaC Findings (monitored) Findings by Severity, Findings Trend, Findings MTTR, Findings Activity, Trend
Cloud resources (monitored) Trend

Widgets are also available in the widget bank for use in custom dashboards.

Duplicate a Query

Duplicate a query to use a built-in or existing custom query as a template for a new one.

To duplicate a query:

  1. Go to Explore > Queries.
  2. Find the query you want to duplicate.
  3. Select the row, or open the three-dot menu and choose Duplicate.
  4. In the Query dialog, adjust the following values, as needed:
    1. Name
    2. Category
    3. Visibility:
      • Public — Visible to everyone in the organization.
      • Private — Visible only to you.
  5. Click Add.

Delete Custom Queries

You can delete custom queries from the Queries page to keep your workspace organized. Built-in queries are system-provided and cannot be deleted or modified.

Caution: Deleting a query is permanent.
  • If a query is marked Public, deleting it will remove it for everyone in your organization.
  • If the query is monitored, deleting it also permanently deletes all saved historical data.

To delete queries:

  1. Go to Explore > Queries.
  2. Select the checkbox next to one or multiple queries you want to remove.
  3. Click Delete.