Create an Input

After you complete the configuration for your Tenable Add-On for Splunk, you must create the input. The following process outlines input creation if you have a deployment with Tenable Attack Surface Management.

To create an input:

  1. In the left navigation bar, click Tenable EASM for Splunk.

  2. Click the Inputs tab.

  3. Click Create New Input.

    The Add Tenable EASM window opens.

  4. Provide the following information.

    Note: If you don't use the default index, you must update the Tenable Macro.

    Tenable Attack Surface Management

    Input Parameters Description Required
    Name The unique name for each Tenable data input.

    Yes
    Interval The interval parameter specifies when the input restarts to perform the task again (in seconds). The interval amount must be between 3600 and 86400.

    Yes
    Index The index in which to store Tenable Vulnerability Management data.

    Yes
    Tenable EASM Domain Splunk pulls data from this Tenable account. Yes
    Tenable EASM API Key Tenable Attack Surface Management API Key. Yes

  5. Click Add to create the input.