Manage Data Sources and Update Modes in Tenable One Open Connector

The Tenable One Open Connectorr supports two data sources source options (Automatic and Static) and two distinct synchronization modes for each source: Full Fetch and Incremental Fetch. These modes allow you to optimize for data hygiene or resource efficiency while maintaining a reliable "Source of Truth" for your asset and finding lifecycles.

Change the Data Source or Update Mode

Tenable Exposure Management allows you to modify your connector setup to adapt to changes in your data pipeline or security requirements. You can switch between data sources (Automatic and Static), update authentication details, toggle between Full Fetch and Incremental Fetch modes, or switch data update modes.

Note: You cannot change the Asset Type after the initial connector setup. Each connector instance supports only one asset type. To ingest data for a different asset type, create a new connector instance.

1. On the Connectors page, click the Tenable One Open Connector you want to edit.
2. In the connector setup page, select the new data source (Static or Automatic) or update your Data Update Mode.
3. Update your credentials, upload a new file, or adjust the configuration settings as required.
4. In the Test connectivity section, click Test Connectivity. Tenable Exposure Management must validate the new setup or credentials before you can proceed.
5. Click Next to review your file preview and mapping settings. The platform provides mapping suggestions based on your previously processed data.
6. Review and address any synchronization alerts. For example, you may need to select a reconciliation mode or approve a manual baseline reset to prevent data duplication.
7. Confirm your settings and click Save & Sync.

Switching from Static (Manual) to Automatic (S3)

Transitioning from manual uploads to automated cloud pulls generally maintains your previously configured sync mode. The following table describes the logic impact when changing your data source to S3.

From	To	Logic Impact	UI Response
Static (Full)	Automatic (Full)	No change in synchronization logic occurs; only the data source is automated.	None.
Static (Incremental)	Automatic (Full)	Tenable Exposure Management switches to a more "destructive" mode to ensure a fresh baseline from the automated source.	Confirm Data Override alert: Notifies you that replacing records may reset historical trends and remediation metrics.
Static (Full)	Automatic (Incremental)	Since a "Full" baseline already exists from the static upload, the first S3 pull can proceed as an Incremental sync.	None.
Static (Incremental)	Automatic (Incremental)	No logic change occurs; Tenable Exposure Management continues incremental updates but pulls from S3 instead of a manual upload.	None.

Switching from Automatic (S3) to Static (Manual)

Switching back to manual uploads requires you to ensure the uploaded file follows the existing sync criteria to prevent data duplication. The table below outlines the transition logic.

From	To	Logic Impact	UI Response
Automatic (Full)	Static (Full)	This is a direct transition; you become responsible for manual "Full" uploads.	None.
Automatic (Incremental)	Static (Full)	Tenable Exposure Management performs an intentional shift to re-baseline the data manually.	Confirm Data Override modal: Acknowledges that the manual upload will replace existing asset records and findings.
Automatic (Full)	Static (Incremental)	This transition uses the previous S3 "Full" sync as the baseline for the manual upload to maintain efficiency.	None.
Automatic (Incremental)	Static (Incremental)	Tenable Exposure Management continues incremental logic; you must ensure the manual file follows the existing Incremental criteria.	None.

Switching between Full and Incremental Sync Modes

Changing the sync mode without altering the data source requires Tenable Exposure Management to identify the last successfully processed file to establish a structure. This table covers transitions within the same source.

From	To	Logic Impact	UI Response
Full Fetch	Incremental Fetch	Tenable Exposure Management identifies the last successful sync structure. Asset-only files default to Stable Inventory Mode. Files with assets and findings require user input.	Incremental Sync Mode Selection: A pop-up appears to choose between Additive Only Mode, Dynamic Remediation Mode, or Strict Inventory Mode.
Incremental Fetch	Full Fetch	The next synchronization overrides all existing asset records and findings for the connector to establish a new baseline.	Confirm Data Override alert: Warns that this action may reset historical trend lines and remediation metrics for those assets.

Technical Constraints and Conflicts

To ensure data integrity, Tenable Exposure Management enforces the following constraints during synchronization transitions:

• Uniqueness criteria changes: Changing mapping or unique IDs is incompatible with Incremental Fetch. You must select the Run next upload as "Override File (Full Fetch)" check box during the edit flow to avoid creating duplicate records.
• Incompatible file content: If the file structure is not compatible with the selected Incremental mode, the sync fails. Tenable Exposure Management displays an error message requesting an update to the file or sync mode.
• Credential changes: Updating credentials re-initiates the configuration flow. While the Incremental selection is retained, you must re-verify the mapping and uniqueness criteria to ensure proper access.