TOC & Recently Viewed

Recently Viewed Topics

Manage Filter Components for Multiple Elements

When managing filter components for a chapter report in SecurityCenter, you can search the report for elements that use certain filter components, then update the filter component criteria for all matching elements in that report at the same time.

Tip: You can build filters using one or more filter components with defined filter component criteria. Filter components are types of data (e.g., CVE ID or Severity). After you select a filter component, you specify the filter component criteria (e.g., a specific CVE ID or a specific severity level).

You can use the following filter components to search and update: Address, Audit File, Asset, CVE ID, DNS Name, IAVM ID, Repositories, Scan Policy, and Severity.

For example, if you search a report definition for all elements where the Severity filter component is set to Info, you can update the Severity filter component to Medium for all elements, and add an Audit File filter component to the elements at the same time.

To manage filter components for multiple elements in a chapter report:

  1. Click Reporting > Reports.

    The Reports page appears.

  2. In the reports table, click the name of the report you want to edit.

    The Edit Report page appears.

  3. In the left navigation bar, click Definition.

    The report outline appears. This outline is, by default, expanded. For more information, see Edit a Report Outline.

  4. In the top navigation bar of the outline, click Find/Update Filters.

To search for specific elements in the report:

  1. In the Search Filters section, click Add Search Filter.
  2. Select a filter component from the drop-down box.
  3. Select an operator from the drop-down box.
    1. If you selected is equal to or contains as operator, type filter component criteria or select a value from the list of valid filter component criteria, as appropriate to the filter component you selected.
  4. Click the check mark at the end of the filter box.

    SecurityCenter searches the report outline for elements that match your search criteria and displays the results in the Matching Filters box.

To specify the filter updates you want to make:

  1. In the Update Actions section, click Add Search Filter.
  2. Select a filter component from the drop-down box.
  3. Select an operator from the drop-down box.
  4. Type filter component criteria or select a value from the list of valid filter values, as appropriate to the filter component and operator you selected.
  5. Click the check mark at the end of the filter box.

To review and update the filter updates:

  1. In the Matching Filters box, review the list to verify that you want to apply the update to all the listed elements.

    Tip: If you do not want to apply the current update to all the listed elements, it may be more appropriate to manage filter components by individual element. For more information, see Manage Filter Components for a Single Element.

  2. Click Update Filters.

    SecurityCenter applies the updates to the matching elements and returns you to the report outline.

  3. Click Submit to save your changes to the report.

Copyright 2017 - 2018 Tenable, Inc. All rights reserved. Tenable Network Security, Nessus, SecurityCenter, SecurityCenter Continuous View and Log Correlation Engine are registered trademarks of Tenable, Inc. Tenable, Tenable.io, Assure, and The Cyber Exposure Company are trademarks of Tenable, Inc. All other products or services are trademarks of their respective owners.