TOC & Recently Viewed

Recently Viewed Topics

Tenable for Assets for ServiceNow

Description

Tenable.io's continuous monitoring and vulnerability management platform is trusted by over 20,000 customers worldwide to protect critical applications, devices, and infrastructures. Purpose-built for ServiceNow's Vulnerability Response offering, this application imports your Tenable.io vulnerability data and lets you act on it within ServiceNow.

Application Menu

Tenable for Assets

Primary Role Required: x_tsirm_tio_cmdb.user

Title Link Type Required Role
Documentation URL (from Arguments:) x_tsirm_tio_cmdb.user
Contact Support URL (from Arguments:) x_tsirm_tio_cmdb.user
Dashboard Homepage x_tsirm_tio_cmdb.user
Assets Pending Approval List of Records x_tsirm_tio_cmdb.user
All Synchronized Items URL (from Arguments:) x_tsirm_tio_cmdb.user
Configuration Separator x_tsirm_tio_cmdb.admin
General Settings Single Record x_tsirm_tio_cmdb.admin
Connectors List of Records x_tsirm_tio_cmdb.admin
API Data Mappings Separator x_tsirm_tio_cmdb.user
Transform Mpas List of Records x_tsirm_tio_cmdb.admin
Default Outbound Map Single Record x_tsirm_tio_cmdb.admin
CI Matching Rules List of Records x_tsirm_tio_cmdb.admin
CI Creating Rules List of Records x_tsirm_tio_cmdb.admin
Diagnostics Separator x_tsirm_tio_cmdb.admin
Asset Outbound Jobs List of Records x_tsirm_tio_cmdb.admin
Asset Inbound Jobs List of Records x_tsirm_tio_cmdb.admin
Queued Actions List of Records x_tsirm_tio_cmdb.admin

Data Source

Tenable for Assets Data Source

Description: The data source that is used to import vulnerabilities that come into ServiceNow from Tenable.io.

UI Action

Approve CI

Description: Takes the information provided on this record and re-classifies it as a CI record of a specified class type.

Sync Asset Updates Now

Description: Starts the processes that creates an async queue action to pull asset updates from Tenable.io into ServiceNow.

Sync New Assets Now

Description: Starts the processes that creates an async queue action to pull new assets from Tenable.io into ServiceNow.

Force Asset Sync Now

Description: Starts the process that creates async queue actions for both pushing and pulling data between ServiceNow and Tenable.io.

Approve CIs

Description: Takes the information provided on the list of records selected and re-classifies them as a CI record of a specified class type from a pop-up dialog.

Script Include

TenableIOSyncProfileHelperV2

Description: A helper class that contains functions to work with Sync Profiles.

TenableIOImportLogDetailHelper

Description: A helper for more detailed logging in application.

TenableIOImportLogHelper

Description: A helper for more detailed logging in application.

RuleHelper

Description: A helper class for processing matching and creating rules.

TenableIOScheduleHelper

Description: A helper class that contains functions that kick off the scheduled async queue entries.

CIRuleAjaxHelper

Description: A helper that gets the next order number value based on existing rules in table.

TenableIOAssetUtils

Description: A class that contains functions for matching and creating configuration items as assets come into ServiceNow from Tenable.io.

SystemLogHelper

Description: A library to provide logging to the application.

TenableIOJobHelperV2

Description: A helper class that contains functions used to create and manage the jobs and job chunks version 2.

TenableIOJobHelper

Description: A helper class that contains functions used to create and manage the jobs and job chunks.

PullFilterHelperV2

Description: This script include is for the new updated asset export API.

PushFilterHelper

Description: A helper that contains functions used in sending configuration item details to Tenable.io.

GeneralSettingsHelper

Description: A library for access and management of general settings for the application

CIRuleHelper

Description: A helper class that contains functions that process the matching and creating rules.

PullFilterHelper

Description: A helper that contains functions used in receiving asset details from Tenable.io into ServiceNow.

MapHelper

Description: A helper that containsfunctions used when processing simple maps.

Table

TenableIO Job Chunk

Description: A table containing outbound job chunks information.

Tenable for Assets Data Source

Description: A staging table for records processed through the importing of vulnerabilities from Tenable.io into ServiceNow.

Tenable.io Asset Outbound Job

Description: A table that contains outbound job information.

TenableIO Import

Description: A staging table for records being processed through the importing of assets from Tenable.io into ServiceNow.

Tenable.io Assets Import Job

Description: A table that contains inbound job information.

TenableIO Filter

Description: A table that contains filter definitions for pulling assets from Tenable.io used in the API call to determine which assets to pull over.

CI Rules

Description: A table that contains definitions of the rules to match and create Configuration Items as they come into ServiceNow from Tenable.io.

Simple Map

Description: A table that contains the definition of a simple map.

General Settings

Description: A table that contains general settings for the application.

Field Map

Description: A table that contains definitions of field maps linked to simple maps.

Tenable.io - Asset Attributes

Description: A table that contains asset attributes from Tenable.io. This table is linked to the Configuration Item through a reference field

Sync Profile Source Lookup

Description: A simple table that holds values for a choice field on the Sync Profile.

Sync Profile

Description: A table that holds the definitions of either outbound or inbound sync profiles.

Assets Pending Approval

Description: A table extended from cmdb_ci that holds assets coming into ServiceNow from Tenable.io that have not been classified.

Tenable.io Asset Import Job Chunk

Description: A table that contains inbound job chunks information

Client Script

Populate Order

Description: A client script to auto-populate the next order number when creating a new CI Rule.

Primary Roles

x_tsirm_tio_cmdb.admin

Description: An administrative user of the application.

x_tsirm_tio_cmdb.user

Description: A basic user of the application.

Secondary Roles

x_tsirm_tio_cmdb.sync_profile_source_lookup_user

Description: Access to the table used in a choice list field lookup.

x_tsirm_tio_cmdb.tenableio_filter_user

Description: Basic access to the simple maps filters.

x_tsirm_tio_cmdb.tenableio_job_user

Description: Basic access to the outbound job table.

x_tsirm_tio_cmdb.general_settings

Description: Basic access to general settings for the application.

x_tsirm_tio_cmdb.tenable_asset_attributes_user

Description: Basic access to the asset attributes table.

x_tsirm_tio_cmdb.field_map_user

Description: Basic access to the field map table.

x_tsirm_tio_cmdb.tenable_io_asset_import_job_user

Description: Basic access to the asset import job table.

x_tsirm_tio_cmdb.simple_map_user

Description: Basic access to the simple map table.

x_tsirm_tio_cmdb.tenable_io_asset_import_job_chunk_user

Description: Basic access to the import job chunk table.

x_tsirm_tio_cmdb.ci_rules_user

Description: Basic access to the CI Rules table.

x_tsirm_tio_cmdb.tenableio_discovered_ci_user

Description: Basic access to the table that holds all of the pending approval configuration items imported from Tenable.io.

x_tsirm_tio_cmdb.sync_profile_user

Description: Basic access to the table holding inbound and outbound sync profiles.

x_tsirm_tio_cmdb.tenableio_job_chunk_user

Description: Basic access to the outbound job chunk table.

UI Policy

Fields That Should Always be READ ONLY

Description: Setting fields that should always be read only on the Assets Pending Approval table.

Table: x_tsirm_tio_cmdb_disc_ci

Show Static Text field

Description: Shows the Static Text field when that is the type

Table: x_tsirm_tio_cmdb_field_map


Condition: type=static^EQ

Field Mandatory Visible Read Only
static_text True True Leave alone

Set Mandatory Fields

Description: Determines which fields are mandatory on the sync profile form.

Table: x_tsirm_tio_cmdb_sync_profile

Field Mandatory Visible Read Only
name True Leave alone Leave alone
record_source True Leave alone Leave alone
connector True Leave alone Leave alone

Show Advanced Configuration Fields

Description: Sets which fields are showing under Advanced Settings on the connector.

Table: x_tsirm_api_access_connector


Condition: show_advanced_settings=true^EQ

Field Mandatory Visible Read Only
x_tsirm_tio_cmdb_last_pull_updates_time Leave alone True Leave alone
x_tsirm_tio_cmdb_inbound_import_set Leave alone True Leave alone
x_tsirm_tio_cmdb_tio_last_update_time_field Leave alone True Leave alone
x_tsirm_tio_cmdb_update_all_asset_info Leave alone True  

Hide Tenable.io Configuration Fields

Description: Hides fields that are not needed if the sync profile is set to ServiceNow as the source (push).

Table: x_tsirm_tio_cmdb_sync_profile


Condition: record_source.value=push^EQ

Field Mandatory Visible Read Only
last_update_time Leave alone False Leave alone
search_type Leave alone False Leave alone
date_range Leave alone False Leave alone

Show Related List on Tenable.io

Description: Sets the related list to show on a certain sync profile.

Table: x_tsirm_tio_cmdb_sync_profile

Show Source Field Name for Direct Field Map

Description: Shows the source field name field on a field map if the type is direct.

Table: x_tsirm_tio_cmdb_field_map


Condition: type=direct^EQ

Field Mandatory Visible Read Only
source_field_name True True Leave alone

Show Value field

Description: Shows the value field in an inbound filter if the Tenable.io field is set to “sources”.

Table: x_tsirm_tio_cmdb_tenableio_filter

Condition: tenableio_field=sources^EQ

Field Mandatory Visible Read Only
value True True Leave alone

Show Condition Field

Description: Shows the condition field if the conditional checkbox is checked on the field map record.

Table: x_tsirm_tio_cmdb_field_map


Condition: conditional=true^EQ

Field Mandatory Visible Read Only
condition True True Leave alone

Set Required Fields

Description: Sets the required fields for the simple map form.

Table: x_tsirm_tio_cmdb_simple_map

Field Mandatory Visible Read Only
type True Leave alone Leave alone
name True Leave alone Leave alone

Mandatory Fields

Description: Sets the required fields for the CI Rules form.

Table: x_tsirm_tio_cmdb_ci_rules

Field Mandatory Visible Read Only
name True Leave alone Leave alone

Show Advanced Settings Fields

Description: Sets which fields show under Advanced Settings for General Settings.

Table: x_tsirm_tio_cmdb_general_settings


Condition: show_advanced_settings=true^EQ

Field Mandatory Visible Read Only
max_job_wait_time Leave alone True Leave alone
max_job_log_age_days Leave alone True Leave alone
sync_record_changes Leave alone True Leave alone
analysis_import_set_name Leave alone True Leave alone
sync_new_records Leave alone True Leave alone

Enable Timer

Description: Shows the latest duration and average duration fields if the timer is enabled.

Table: x_tsirm_tio_cmdb_ci_rules


Condition: enable_timer=true^EQ

Field Mandatory Visible Read Only
latest_duration Leave alone True Leave alone
average_duration Leave alone True Leave alone

Make Target Field Mandatory

Description: Makes target field mandatory on field map form.

Table: x_tsirm_tio_cmdb_field_map

Field Mandatory Visible Read Only
target_field_name True Leave alone Leave alone

Show Source Script Field

Description: Shows the source script field when scripted source is the type of field map.

Table: x_tsirm_tio_cmdb_field_map


Condition: type=scripted^EQ

Field Mandatory Visible Read Only
source_script True True Leave alone

Show Outbound Fields

Description: Determines which fields show on the job chunk table (Inbound type of chunk not used since new API change).

Table: x_tsirm_tio_cmdb_tenableio_job_chunk


Condition: job_id.type=outbound^EQ

Field Mandatory Visible Read Only
outbound_assets Leave alone True Leave alone
import_job_id Leave alone True Leave alone

Show Later Than Date Field

Description: Shows a different value (later than date field) field if the Tenable.io field is set to a date type field.

Table: x_tsirm_tio_cmdb_tenableio_filter

Condition: tenableio_fieldNOT INservicenow_sysid,sources,has_plugin_results^EQ

Field Mandatory Visible Read Only
later_than_date True True Leave alone

Hide ServiceNow Config Fields if Source is Tenable.io

Description: Hides certain fields on sync profile form for Tenable.io source type.

Table: x_tsirm_tio_cmdb_sync_profile


Condition: record_source.value!=push^EQ

Field Mandatory Visible Read Only
default_chunk_size Leave alone Leave alone Leave alone
conditions Leave alone False Leave alone
configuration_item_source_table Leave alone False Leave alone

Show Boolean Field

Description: Shows Boolean field for certain types of fields on filter form.

Table: x_tsirm_tio_cmdb_tenableio_filter

Condition: tenableio_field=servicenow_sysid^ORtenableio_field=has_plugin_results^EQ

Field Mandatory Visible Read Only
boolean True True Leave alone

Table Transform Map

Tenable.io Asset Data Source TM

Description: Transform map that processes the records coming in through the data source.

Default TenableIO Import Map

Description: Default transform map for all assets coming into ServiceNow.

Business Rule

Update Job and Chunk Status

Description: Business rule that sets the status of jobs and chunks.

Push Asset Update to Tenable.io

Description: Sends asset update information to Tenable.io by creating an async request queue action entry.

Set Name

Description: Sets the name of the asset attribute record if the connector or Asset UUID change.

Set Tenable Values when Done Processing

Description: On complete outbound jobs, this sets values on the asset attribute record.

Update Job Percent Complete

Description: Updates the job percent complete as records get processed.

Create Settings if None exist

Description: Automatically creates a general settings record with default values if one doesn’t exist.

Calc Job State

Description: Calculates the job state based on happenings with chunks.

On Job State Change

Description: Inbound job total records and percent complete, when the state of the job changes.

Notify About Limitations on Out of Box Rules

Description: Shows UI message explaining that out of box CI rules are not editable.

Push Asset Update to Tenable.io (Update)

Description: Sends asset update information to Tenable.io by creating an async request queue action entry.

Scheduled Script Execution

Tenable.io Job Log Cleanup Launcher

Description: Runs once a day to clean up jobs older than the days set in general settings.

Tenable.io Schedule Launcher

Description: Runs once a minute to check if scheduled launches need to run based on the frequency set in general settings.

Tenable for Assets Import Chunks Launcher

Description: Runs every 6 seconds to check if there is a new job chunk to process for any jobs in the Importing state (one at a time).

Check Outbound Chunk Status

Description: Runs once a minute to check the outbound chunk status and update the job and chunk.

Tenable for Assets Check Job Launcher

Description: Runs once a minute to check for any jobs that are in the New or Identifying Chunks state to check the status of the job and for chunks that need to be created in ServiceNow.

Copyright © 2019 Tenable, Inc. All rights reserved. Tenable, Tenable.io, Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable, Inc.. Tenable.sc, Lumin, Assure, and the Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.