Assets Matching and Creating Rules

You can configure matching and creating rules in ServiceNow for Tenable.io and Tenable.sc. See the steps below for instructions on how to configure matching and creating rules.

  1. In ServiceNow, navigate to Tenable for Assets > Configuration > CI Matching Rules.
  2. At the top of the page, click New.

    The New Record page appears.

  3. In the Name text box, type a name for the matching rule.

  4. From the Product Type drop-down, select Tenable.sc.

    The Source Field option updates according to the product type selected. If you select Tenable.io, TIO precedes the Source Field option. If you select Tenable.sc, TSC precedes the Source Field option.

  5. From the Type drop-down, select Matching.
  6. Select the Active check box.

  7. To reorder the matching rule, edit its Order text box. Matching rules are tried in ascending order (lowest to highest).

  8. Click Submit.

Note: If an asset that does not have a match, it is placed in assets pending approval.

Note: You can also click the Advanced check box if you prefer to write a custom rule.

Note: The existing default rules are example rules for use with an out-of-box implementation of Tenable for ServiceNow using standardized data. Work with your ServiceNow administrator to customize these default rules.

  1. In ServiceNow, navigate to Tenable for Assets > Advanced > CI Creating Rules.

    The CI Rules page appears.

  2. Configure the CI Creating Rule.

    Option Description
    Name A name for the creating rule.
    Active If selected, an asset sync is automatically queued when you submit the import or export. Default setting: selected.
    Order

    Reorders the matching rule. Rules are tried in ascending order (lowest to highest).
    Source Table The table reference for the matching rule.
    TSC Source Field The field in Tenable.sc that you want to match.
    Use Ignore Query Select to utilize the ignore query.
    Include Asset Attributes

    Select to include data specific to Tenable assets.

    Note: If this is not selected, Tenable assets are added to the Assets Pending Approval section.
    Multiple Match Action Determines the action to take if multiple CIs match this rule.
    Enable Timer Enables timer settings for the matching rule.
    Advanced Script Enables script based option for advanced configuration.
    Product Type The Tenable application used for the creating rule.
    Type The type of rule being created - Creating or Matching.
    Target Table The table in ServiceNow to use in matching the TSC Source Field.
    Match Field The field in the Target Table used to match the TSC Source Field.
    Target Reference Select to denote additional references for the Target Field.
    Target Field The "master field" related to the Target Table.
  3. Click Submit.

  1. In ServiceNow, navigate to Tenable for Assets > Configuration > CI to SC Asset Group.

    The CI to SC Asset Group configuration page appears.

  2. In the Name text box, type a name for the asset group.
  3. In Group Type, select DNS or Static IP Address.
  4. In the Filter section, add filter conditions for the asset group.
  5. In the Connector field, enter the connector you want to use for the asset group.
  6. (Optional) Correlation ID and Last Sync options can be added for your asset group.
  7. Click Submit.

Note: The existing default rules are example rules for use with an out-of-box implementation of Tenable for ServiceNow using standardized data. Work with your ServiceNow administrator to customize these default rules.

  1. In ServiceNow, navigate to Tenable for Assets > Advanced > CI Creating Rules.

    The CI Rules page appears.

  2. Configure the CI Creating Rule.

    Option Description
    Name A name for the creating rule.
    Active If selected, an asset sync is automatically queued when you submit the import or export. Default setting: selected.
    Order

    Reorders the creating rule. Rules are tried in ascending order (lowest to highest).
    Source Table The table reference for the creating rule.
    TSC Source Field The field in Tenable.sc that you want to create.
    Use Ignore Query Select to utilize the ignore query.
    Include Asset Attributes

    Select to include data specific to Tenable assets.

    Note: If this is not selected, Tenable assets are added to the Assets Pending Approval section.
    Multiple Match Action Determines the action to take if multiple CIs match this rule.
    Enable Timer Enables timer settings for the creating rule.
    Advanced Script Enables script based option for advanced configuration.
    Product Type The Tenable application used for the creating rule.
    Type The type of rule being created - Creating or Matching.
    Target Table The table in ServiceNow to use in matching the TSC Source Field.
    Match Field The field in the Target Table used to match the TSC Source Field.
    Target Reference Select to denote additional references for the Target Field.
    Target Field The "master field" related to the Target Table.
  3. Click Submit.

Pending Approval indicates that as an asset is synced, it cannot be classified as a certain type of configuration item (computer, printer, etc.). These assets must be manually approved.

  1. In ServiceNow, navigate to Tenable for Assets > Assets Pending Approval.
  1. Click the asset(s) you want to approve.
  2. From the Target CI Class text box, select a value for the asset.
  3. Click Approve CI.
  1. Select the check boxes next to the assets you wish to approve.
  2. From the Action menu, select Approve CIs.
  3. From the Target CI Class text box, select a value for the assets.

  4. Click Update.