Manage Combinations

When you create initiatives, you assign combinations to define what resources they track in your environment. Combinations use queries to search for specific findings.

You can use the query builder to create your own combinations, apply Tenable combinations, or combine the two. When you create combinations, you can save them as templates to share with your organization.

The following sections explain how to use combinations.

Create a Combination

When you create an initiative, unless you want to use existing combinations, you must first create a new combination.

To create new combinations:

1. In the left navigation, click Exposure Response.

2. In the left panel, click New.

   The Create Combination pane appears. It contains the following options.

   Option	Description
   Name	Type a combination name.
   Description	Type a description, for example High CvSS score.
   Query	In the query box, define what resources the combination searches for. For example, CVSSv3 Base Score is greater than 6. Note: For any combination, the system supports a maximum of six queries separated by operators.
   Add to Initiatives	(Optional) Choose a current initiative in which to add the combination. Note: Initiatives with multiple combinations use a logical OR filter. The data displayed will include all results from each of the individual combinations.
   Shared	(Optional) Enable this toggle to share the combination with your organization in the Shared tab.

3. Click Save.

   The combination appears in the left panel under Personal or Shared.

Edit a Combination

You can edit combinations based on your Tenable user role and the combination status.

• With the Exposure Response Manager permission: You can edit any shared non-Tenable combination.

• Without the Exposure Response Manager permission:

  • You can edit unshared combinations from My Combinations.

  • You can edit shared combinations that you created if they are not in use.

To edit a combination:

1. In the left navigation, click Exposure Response.

2. Click Manage Combinations.

   The Manage Combinations tab appears.

3. In the left pane, in the combination to edit, click and select Edit.

4. In the Edit Combination panel that appears, change the options.

   Note: To remove a combination from a current initiative, edit the initiative instead.

5. Click Save.

   The system saves the combination.

Copy a Shared Combination

In the Exposure Response section, the Shared tab contains combinations shared by your organization. When you want to customize a combination that you did not create, you can copy it to My Combinations and then edit the copy.

To copy and edit a shared combination:

1. In the left navigation, click Exposure Response.

2. Click Manage Combinations.

   The Manage Combinations tab appears.

3. In the left panel, click Shared.

4. In the left panel, click the template to copy and then, in the right panel, click Copy to my combinations.

   The system copies the shared combination.

Delete a Combination

You can delete combinations based on your Tenable user role and the combination status.

• With the Exposure Response Manager permission: You can delete any shared non-Tenable combination.

  Note: When a combination is the only data source for an initiative, deleting it pauses the initiative.

• Without the Exposure Response Manager permission:

  • You can delete unshared combinations from My Combinations.

  • You can delete shared combinations that you created if they are not in use.

To delete a combination:

1. In the left navigation, click Exposure Response.

2. Click Manage Combinations.

   The Manage Combinations tab appears.

3. In the left pane, in the combination to edit, click and select Delete.

4. In the confirmation dialog that appears, click Delete again.

   The system deletes the combination.