Asset Filters

On the Assets page, you can filter your assets via standard filters that apply to all assets or by asset-specific filters.

You can save a set of commonly used filters as a saved filter to access later or share with other members of your team.

Note: To optimize performance, Tenable limits the number of filters that you can apply to any Explore > Assets views (including Group By tables) to 35.

Note: You can right-click on values within a table cell to use the Filter By option. For more information, see Right-Click Filtering.

You can select from the following filter types:

The following table describes the filters that apply to all assets:

Filter Description
Account ID The unique identifier assigned to the asset resource in the cloud service that hosts the asset.
ACR

(Requires Tenable Lumin license) The asset's ACR.
ACR Severity

(Requires Tenable Lumin license) (Requires Tenable One or Tenable Lumin license) The ACR category of the ACR calculated for the asset.
AES

(Requires Tenable Lumin license)The Asset Exposure Score (AES) calculated for the asset.
AES Severity

(Requires Tenable Lumin license) (Requires Tenable Lumin license) The AES category of the AES calculated for the asset.
Agent Name The name of the Tenable Nessus agent that scanned and identified the asset.
ARN The Amazon Resource Name (ARN) for the asset.
ASN The Autonomous System Number (ASN) for the asset.
Assessed vs. Discovered

Specifies whether Tenable Vulnerability Management scanned the asset for vulnerabilities or if Tenable Vulnerability Management only discovered the asset via a discovery scan. Possible values are:

  • Assessed

  • Discovered Only

Note: This filter is selected by default.
Asset ID

The asset's unique identifier.
AWS Availability Zone

The name of the Availability Zone where AWS hosts the virtual machine instance. For more information, see Regions and Zones in the AWS documentation.
AWS EC2 AMI ID

The unique identifier of the Linux AMI image in Amazon Elastic Compute Cloud (Amazon EC2). For more information, see the Amazon Elastic Compute Cloud Documentation.
AWS EC2 Instance ID

The unique identifier of the Linux instance in Amazon EC2. For more information, see the Amazon Elastic Compute Cloud Documentation.
AWS EC2 Name

The name of the virtual machine instance in Amazon EC2.
AWS EC2 Product Code

The product code associated with the AMI used to launch the virtual machine instance in Amazon EC2.
AWS Instance State

The state of the virtual machine instance in AWS at the time of the scan. For possible values, see InstanceState in the Amazon Elastic Compute Cloud Documentation.
AWS Instance Type

The type of virtual machine instance in Amazon EC2. Amazon EC2 instance types dictate the specifications of the instance (for example, how much RAM it has). For a list of possible values, see Amazon EC2 Instance Types in the AWS documentation.
AWS Owner ID

A UUID for the Amazon AWS account that created the virtual machine instance. For more information, see View AWS Account Identifiers in the AWS documentation.

This attribute contains a value for Amazon EC2 instances only. For other asset types, this attribute is empty.
AWS Region

The region where AWS hosts the virtual machine instance, for example, us-east-1.

AWS Security Group

The AWS security group (SG) associated with the Amazon EC2 instance.

AWS Subnet ID

The unique identifier of the AWS subnet where the virtual machine instance was running at the time of the scan.
AWS VPC ID

The unique identifier of the public cloud that hosts the AWS virtual machine instance. For more information, see the Amazon Virtual Private Cloud Documentation.
Azure Location The location of the resource in the Azure Resource Manager. For more information, see the Azure Resource Manager Documentation.
Azure Resource Group The name of the resource group in the Azure Resource Manager. For more information, see the Azure Resource Manager Documentation.
Azure Resource ID

The unique identifier of the resource in the Azure Resource Manager. For more information, see the Azure Resource Manager documentation.

Azure Resource Type The resource type of the resource in the Azure Resource Manager. For more information, see the Azure Resource Manager Documentation.
Azure Subscription ID The unique subscription identifier of the resource in the Azure Resource Manager. For more information, see the Azure Resource Manager Documentation.
Azure VM ID

The unique identifier of the Microsoft Azure virtual machine instance. For more information, see the Azure Resource Manager documentation.

BIOS ID

The NetBIOS name for the asset.
Cloud Provider

The name of the cloud provider that hosts the asset.
Created Date The date and time when Tenable Vulnerability Management created the asset record.
Custom Attribute

A filter that searches for custom attributes via a category-value pair. For more information about custom attributes, see the Tenable Developer Portal.
DNS

The fully-qualified domain name of the host that the vulnerability was detected on.
Domain The domain to which the asset belongs.
First Seen

The date and time when a scan first identified the asset.
Google Cloud Instance

The unique identifier of the virtual machine instance in Google Cloud Platform (GCP).
Google Cloud Project ID

The customized name of the project to which the virtual machine instance belongs in GCP. For more information, see Creating and Managing Projects in the GCP documentation.
Google Cloud Zone

The zone where the virtual machine instance runs in GCP. For more information, see Regions and Zones in the GCP documentation.
Has Plugin Results

Specifies whether the asset has plugin results associated with it.
Host Name (Domain Inventory) The host name for assets found during attack surface management scans; only for use with Domain Inventory assets.
Hosting Provider The hosting provider for the asset.
IaC Resource Type The Infrastructure as Code (IAC) resource type of the asset.
Installed Software

A list of Common Platform Enumeration (CPE) values that represent applications identified on an asset from a scan. This field supports the CPE 2.2 format. For more information, see the Component Syntax section of the CPE Specification documentation. For assets identified in Tenable scans, this field only contains data when a scan using Tenable Nessus Plugin 45590 has evaluated the asset.

IPV4 Address

The IPv4 address associated with the asset record.
IPV6 Address

The IPv6 address associated with the asset record.
Is Attribute Specifies whether the asset is an attribute.
Is Auto Scale Specifies whether the asset scales automatically.
Is Unsupported Specifies whether the asset is unsupported in Tenable Vulnerability Management.
Last Audited The time and date at which the asset was last audited.
Last Authenticated Scan

The date and time of the last authenticated scan run against the asset. An authenticated scan that only uses discovery plugins updates the Last Authenticated Scan field, but not the Last Licensed Scan field.
Port Last Detected Open Filter for all assets that had detected open ports as of a date or a date range you specify. For the best results, combine with the Ports filter.
Last Licensed Scan

The date and time of the last scan in which the asset was considered "licensed" and counted towards Tenable's license limit. A licensed scan uses non-discovery plugins and can identify vulnerabilities. Unauthenticated scans that run non-discovery plugins update the Last Licensed Scan field, but not the Last Authenticated Scan field. For more information on how licenses work, see Tenable Vulnerability Management Licenses.
Last Scan Time The date when a scan was last run against the asset.
Last Seen

The date and time at which the asset was last observed as part of a scan.
Licensed

Specifies whether the asset is included in the asset count for the Tenable Vulnerability Management instance.

MAC Address

A MAC address that a scan has associated with the asset record.
Mitigated Specifies whether a scan has identified mitigation software on the asset.
Mitigation Last Detection The date and time of the scan that last identified mitigation software on the asset.
Mitigation Product Name The name of the mitigation software identified on the asset. Tenable Lumin defines mitigations as security agent software running on endpoint assets, which include antivirus software, Endpoint Protection Platforms (EPPs), or Endpoint Detection and Response (EDR) solutions.
Mitigation Vendor Name The name of the vendor for the mitigation that a scan identified on the asset.
Mitigation Version The version of the mitigation that a scan identified on the asset.
Name

The asset identifier, assigned based on the availability of specific attributes in logical order.

Note: This filter is selected by default.
NetBIOS Name

The NetBIOS name for the asset.
Network The name of the network object associated with scanners that identified the asset. The default name is Default. For more information, see Networks.
Operating System

The operating system that a scan identified as installed on the asset.

Note: This filter is selected by default.
Operating System (WAS) The Tenable Web App Scanning (Tenable Web App Scanning) operating system that a scan identified as installed on the asset.
Port

Search your hosts or domain inventory by port values or ranges for assets with a relationship to that port. For example, assets with port 80. If you import data from Tenable Attack Surface Management, those ports also appear.
Public

Specifies whether the asset is available on a public network. A public asset is within the public IP space and identified by the is_public attribute in the Tenable Vulnerability Management query namespace.
Record Type The asset type.
Region The cloud region where the asset runs.
Repositories Any code repositories associated with the asset.
Resource Type

The asset's cloud resource type (for example, network, virtual machine).

Note: This filter is selected by default.
Scan Frequency

The number of times the asset was scanned within the past 90 days.
ServiceNow Sys ID

Where applicable, the unique record identifier of the asset in ServiceNow. For more information, see the ServiceNow documentation.
Source

The source of the scan that identified the asset. Possible values are:

  • AWS
  • AWS FA
  • Azure
  • AZURE FA
  • Cloud Connector
  • Cloud IAC
  • Cloud Runtime
  • GCP
  • Nessus Agent
  • Nessus Scan
  • NNM
  • ServiceNow
  • WAS

Note: This filter is selected by default.
SSL/TLS Specifies whether the application on which the asset is hosted uses SSL/TLS public-key encryption.
System Type

The system types as reported by Plugin ID 54615. For more information, see Tenable Plugins.
Tags

Asset tags, entered in pairs of category and value (for example Network: Headquarters). This includes the space after the colon (:). If there is a comma in the tag name, insert a backslash (\) before the comma. If your tag name includes double quotation marks (" "), use the UUID instead. You can add a maximum of 100 tags.

For more information, see Tags.

Note: This filter is selected by default.
Target Groups

The target group to which the asset belongs. This attribute is empty if the asset does not belong to a target group. For more information, see Target Groups.
Tenable ID

The UUID of the asset in Tenable Vulnerability Management.
Terminated

Specifies whether or not the asset is terminated.
Type

The system type on which the asset is managed. Possible options are:

  • Cloud Resource

  • Container

  • Host

  • Cloud

Note: This filter is selected by default.

The following table describes the Host asset filters:

Filter Description
ACR

(Requires Tenable Lumin license) The asset's ACR.
ACR Severity

(Requires Tenable Lumin license) (Requires Tenable One or Tenable Lumin license) The ACR category of the ACR calculated for the asset.
AES

(Requires Tenable Lumin license)The Asset Exposure Score (AES) calculated for the asset.
AES Severity

(Requires Tenable Lumin license) (Requires Tenable Lumin license) The AES category of the AES calculated for the asset.
Agent Name The name of the Tenable Nessus agent that scanned and identified the asset.
Asset ID

The asset's unique identifier.
AWS Availability Zone

The name of the Availability Zone where AWS hosts the virtual machine instance. For more information, see Regions and Zones in the AWS documentation.
AWS EC2 AMI ID

The unique identifier of the Linux AMI image in Amazon Elastic Compute Cloud (Amazon EC2). For more information, see the Amazon Elastic Compute Cloud Documentation.
AWS EC2 Instance ID

The unique identifier of the Linux instance in Amazon EC2. For more information, see the Amazon Elastic Compute Cloud Documentation.
AWS EC2 Name

The name of the virtual machine instance in Amazon EC2.
AWS EC2 Product Code

The product code associated with the AMI used to launch the virtual machine instance in Amazon EC2.
AWS Instance State

The state of the virtual machine instance in AWS at the time of the scan. For possible values, see InstanceState in the Amazon Elastic Compute Cloud Documentation.
AWS Instance Type

The type of virtual machine instance in Amazon EC2. Amazon EC2 instance types dictate the specifications of the instance (for example, how much RAM it has). For a list of possible values, see Amazon EC2 Instance Types in the AWS documentation.
AWS Owner ID

A UUID for the Amazon AWS account that created the virtual machine instance. For more information, see View AWS Account Identifiers in the AWS documentation.

This attribute contains a value for Amazon EC2 instances only. For other asset types, this attribute is empty.
AWS Region

The region where AWS hosts the virtual machine instance, for example, us-east-1.

AWS Security Group

The AWS security group (SG) associated with the Amazon EC2 instance.

AWS Subnet ID

The unique identifier of the AWS subnet where the virtual machine instance was running at the time of the scan.
AWS VPC ID

The unique identifier of the public cloud that hosts the AWS virtual machine instance. For more information, see the Amazon Virtual Private Cloud Documentation.
Azure Location The location of the resource in the Azure Resource Manager. For more information, see the Azure Resource Manager Documentation.
Azure Resource Group The name of the resource group in the Azure Resource Manager. For more information, see the Azure Resource Manager Documentation.
Azure Resource ID

The unique identifier of the resource in the Azure Resource Manager. For more information, see the Azure Resource Manager documentation.

Azure Resource Type The resource type of the resource in the Azure Resource Manager. For more information, see the Azure Resource Manager Documentation.
Azure Subscription ID The unique subscription identifier of the resource in the Azure Resource Manager. For more information, see the Azure Resource Manager Documentation.
Azure VM ID

The unique identifier of the Microsoft Azure virtual machine instance. For more information, see the Azure Resource Manager documentation.

BIOS ID

The NetBIOS name for the asset.
Cloud Provider

The cloud provider for the asset — AWS, Azure, or GCP.

Note: Filter with the Cloud Provider instead of Source to search for resources with imported tags.
Created Date The date and time when Tenable Vulnerability Management created the asset record.
Custom Attribute

A filter that searches for custom attributes via a category-value pair. For more information about custom attributes, see the Tenable Developer Portal.
DNS

The fully-qualified domain name of the host that the vulnerability was detected on.
Domain The domain to which the asset belongs.
First Seen

The date and time when a scan first identified the asset.
Google Cloud Instance

The unique identifier of the virtual machine instance in Google Cloud Platform (GCP).
Google Cloud Project ID

The customized name of the project to which the virtual machine instance belongs in GCP. For more information, see Creating and Managing Projects in the GCP documentation.
Google Cloud Zone

The zone where the virtual machine instance runs in GCP. For more information, see Regions and Zones in the GCP documentation.
Has Plugin Results

Specifies whether the asset has plugin results associated with it.
Installed Software

A list of Common Platform Enumeration (CPE) values that represent applications identified on an asset from a scan. This field supports the CPE 2.2 format. For more information, see the Component Syntax section of the CPE Specification documentation. For assets identified in Tenable scans, this field only contains data when a scan using Tenable Nessus Plugin 45590 has evaluated the asset.

IPv4 Address

The IPv4 address associated with the asset record.

This filter supports multiple asset identifiers as a comma-separated list (for example, hostname_example, example.com, 192.168.0.0). For IP addresses, you can specify individual addresses, CIDR notation (for example, 192.168.0.0/24), or a range (for example, 192.168.0.1-192.168.0.255).

Note: Tenable Vulnerability Management does not support a CIDR mask of /0 for this parameter, because that value would match all IP addresses. If you submit a /0 value for this parameter, Tenable Vulnerability Management returns a 400 Bad Request error message.

Note: Ensure the filter value does not end in a period.
IPv6 Address

An IPv6 address that a scan has associated with the asset record.

This filter supports multiple asset identifiers as a comma-separated list. The IPV6 address must be an exact match. (for example, 0:0:0:0:0:ffff:c0a8:0).

Note: Ensure the filter value does not end in a period.
Last Authenticated Scan

The date and time of the last credentialed scan run on the asset.
Last Licensed Scan

The date and time of the last scan that identified the asset as licensed. For more information about licensed assets, see Tenable Vulnerability Management Licenses.

Last Seen

The date and time at which the asset was last observed as part of a scan.

Note: This filter is selected by default.
Licensed

Specifies whether the asset is included in the asset count for the Tenable Vulnerability Management instance.

Note: This filter is selected by default.
MAC Address

A MAC address that a scan has associated with the asset record.
Mitigated Specifies whether a scan has identified mitigation software on the asset.
Mitigation Last Detection The date and time of the scan that last identified mitigation software on the asset.
Mitigation Product Name The name of the mitigation software identified on the asset. Tenable Lumin defines mitigations as security agent software running on endpoint assets, which include antivirus software, Endpoint Protection Platforms (EPPs), or Endpoint Detection and Response (EDR) solutions.
Mitigation Vendor Name The name of the vendor for the mitigation that a scan identified on the asset.
Mitigation Version The version of the mitigation that a scan identified on the asset.
Name

The asset identifier, assigned based on the availability of specific attributes in logical order.

Note: This filter is selected by default.
NetBIOS Name

The NetBIOS name for the asset.
Network The name of the network object associated with scanners that identified the asset. The default name is Default. For more information, see Networks.
Operating System The operating system that a scan identified as installed on the asset.
Public

Specifies whether the asset is available on a public network. A public asset is within the public IP space and identified by the is_public attribute in the Tenable Vulnerability Management query namespace.
Resource Tags (By Key The key in the key-value pair of the tags or labels imported from the cloud provider.
Resource Tags (By Value The value in the key-value pair of the tags or labels imported from the cloud provider.
Scan Frequency

The number of times the asset was scanned within the past 90 days.
ServiceNow Sys ID

Where applicable, the unique record identifier of the asset in ServiceNow. For more information, see the ServiceNow documentation.
Source

The source of the scan that identified the asset. Possible values are:

  • AWS
  • AWS FA
  • Azure
  • Azure FA
  • Cloud Discovery Connector

    Note: Tenable Vulnerability Management shows this source for compute assets with imported resource tags.
    • For existing assets, the Source column shows Cloud Discovery Connector along with the existing source (AWS, Azure, or GCP).
    • For new assets, the Source column shows Cloud Discovery Connector.
    See the Cloud Provider column to view from where the asset is imported from.
    Caution: If you currently have queries utilizing AWS, GCP, or Azure as sources, you must update these queries. The Cloud Discovery Connector source now replaces AWS, GCP, and Azure sources. Additionally, for the source of assets, use the Cloud Provider parameter to indicate AWS, Azure, or GCP.

  • Cloud IaC
  • Cloud Runtime
  • GCP
  • Nessus Agent
  • Nessus Scan
  • NNM
  • ServiceNow
  • WAS

Note: This filter is selected by default.
System Type

The system types as reported by Plugin ID 54615. For more information, see Tenable Plugins.
Tags

Asset tags, entered in pairs of category and value (for example Network: Headquarters). This includes the space after the colon (:). If there is a comma in the tag name, insert a backslash (\) before the comma. If your tag name includes double quotation marks (" "), use the UUID instead. You can add a maximum of 100 tags.

For more information, see Tags.

Note: This filter is selected by default.
Target Groups

The target group to which the asset belongs. This attribute is empty if the asset does not belong to a target group. For more information, see Target Groups.
Tenable ID

The UUID of the agent present on the asset.
Terminated

Specifies whether or not the asset is terminated.
Updated Date

The time and date when the asset record was last updated.

The following table describes the cloud resources asset filters:

Option Description
Account ID The account ID associated with the asset.
ARN The Amazon Resource Name (ARN) for the asset.
Asset ID

The asset's unique identifier.
Cloud Provider

The name of the cloud provider that hosts the asset.
Created Date The time and date when Tenable Vulnerability Management created the asset record.
First Seen

The date and time when a scan first identified the asset.
IaC Resource Type The Infrastructure as Code (IAC) resource type of the asset.
Is Attribute Specifies whether the asset is an attribute.
Is Auto Scale Specifies whether the asset scales automatically.
Is Unsupported Specifies whether the asset is unsupported in Tenable Vulnerability Management.
Last Audited The time and date when Tenable Vulnerability Management last audited the asset.
Last Licensed Scan

The date and time of the last scan in which the asset was considered "licensed" and counted towards Tenable's license limit. A licensed scan uses non-discovery plugins and can identify vulnerabilities. Unauthenticated scans that run non-discovery plugins update the Last Licensed Scan field, but not the Last Authenticated Scan field. For more information on how licenses work, see Tenable Vulnerability Management Licenses.
Last Seen

The date and time at which the asset was last observed as part of a scan.
Licensed

Specifies whether the asset is included in the asset count for the Tenable Vulnerability Management instance.
Name

The asset identifier, assigned based on the availability of specific attributes in logical order.

Note: This filter is selected by default.
Region The cloud region where the asset runs.
Repositories Any code repositories associated with the asset.
Resource Category The category of the asset resource in the cloud service that hosts the asset.
Resource Tags (By Key)

Tags synced from a cloud source such as Amazon Web Services (AWS), matched by the tag key (for example, Name). Separate individual search items with commas and use wildcards (*) to locate keys that equal, begin with, end with, or contain part of a string. Alternately, search for Assets with or without tags.

Resource Tags (By Value) Tags synced from a cloud source such as Amazon Web Services (AWS), matched by the tag value. Separate individual search items with commas and use wildcards (*) to locate values that equal, begin with, end with, or contain part of a string. Alternately, search for Assets with or without tags.
Resource Type

The asset's cloud resource type (for example, network, virtual machine).

Note: This filter is selected by default.
Source

The source of the scan that identified the asset. Possible values are:

  • Cloud IaC
  • Cloud Runtime

Note: This filter is selected by default.
Tags

Asset tags, entered in pairs of category and value (for example Network: Headquarters). This includes the space after the colon (:). If there is a comma in the tag name, insert a backslash (\) before the comma. If your tag name includes double quotation marks (" "), use the UUID instead. You can add a maximum of 100 tags.

For more information, see Tags.

Note: This filter is selected by default.

The following table describes the web application asset filters:

Filter Description
ACR (Requires Tenable Lumin license) The asset's ACR.
ACR Severity (Requires Tenable Lumin license) (Requires Tenable One or Tenable Lumin license) The ACR category of the ACR calculated for the asset.
AES (Requires Tenable Lumin license) (Requires Tenable Lumin license) The AES category of the AES calculated for the asset.
AES Severity (Requires Tenable Lumin license) (Requires Tenable Lumin license) The AES category of the AES calculated for the asset.
Asset ID

The asset's unique identifier.
Created Date

The date and time when Tenable Vulnerability Management created the asset record.
Custom Attribute

A filter that searches for custom attributes via a category-value pair. For more information about custom attributes, see the Tenable Developer Portal.
First Seen

The date and time when a scan first identified the asset.
Last Authenticated Scan

The date and time of the last authenticated scan run against the asset. An authenticated scan that only uses discovery plugins updates the Last Authenticated Scan field, but not the Last Licensed Scan field.
Last Licensed Scan

The time and date of the last scan that identified the asset as licensed. For more information about licensed assets, see License Information.

Last Seen

The date and time at which the asset was last observed as part of a scan.

Note: This filter is selected by default.
Licensed

Specifies whether the asset is included in the asset count for the Tenable Web App Scanning instance.

An asset is licensed if it meets the following criteria:

  • The scan results for the asset do not include discovery plugin results.

  • The scan results for the asset do not include Tenable Web App Scanning sources (e.g., results from Tenable Nessus scanners, Agents, Tenable Nessus Network Monitor).

  • The asset has not been terminated.
Mitigated Specifies whether a scan has identified mitigation software on the asset.
Mitigation Last Detected The date and time of the scan that last identified mitigation software on the asset.
Mitigation Product Name The name of the mitigation software identified on the asset. Tenable Lumin defines mitigations as security agent software running on endpoint assets, which include antivirus software, Endpoint Protection Platforms (EPPs), or Endpoint Detection and Response (EDR) solutions.
Mitigation Version The version of the mitigation software that a scan identified on the asset.
Name

The asset identifier, assigned based on the availability of specific attributes in logical order.

Note: This filter is selected by default.
Operating System (WAS) The operating system that a scan identified as installed on the asset.
Public

Specifies whether the asset is available on a public network.

Note: A public asset is within the public IP space and identified by the is_public attribute in the Tenable Vulnerability Management query namespace.
Source

The source of the scan that identified the asset. Possible values are:

  • ASM
  • AWS
  • AWS FA
  • Azure
  • Azure FA
  • Cloud IAC

Note: This filter is selected by default.
SSL/TLS Specifies whether the application on which the asset is hosted uses SSL/TLS public-key encryption.
Tags

Asset tags, entered in pairs of category and value (for example Network: Headquarters). This includes the space after the colon (:). If there is a comma in the tag name, insert a backslash (\) before the comma. If your tag name includes double quotation marks (" "), use the UUID instead. You can add a maximum of 100 tags.

For more information, see Tags.

Note: This filter is selected by default.
Updated Date

The time and date when the asset record was last updated.

The following table describes the domain inventory asset filters:

Filter Description
ASN The Autonomous System Number (ASN) for the asset.
Asset ID

The asset's unique identifier.
Created Date The date and time when Tenable Vulnerability Management created the asset record.
DNS (FQDN)

The fully-qualified domain name of the host that the vulnerability was detected on.
Domain The domain name for the asset.
Host Name

The hostname of the asset. This string is determined by information reported by target plugins, and is dependent on the user's environment and configuration.
Hosting Provider The hosting provider for the asset.
IPv4 Address

The IPv4 address associated with the asset record.

This filter supports multiple asset identifiers as a comma-separated list (for example, hostname_example, example.com, 192.168.0.0). For IP addresses, you can specify individual addresses, CIDR notation (for example, 192.168.0.0/24), or a range (for example, 192.168.0.1-192.168.0.255).

Note: Tenable Vulnerability Management does not support a CIDR mask of /0 for this parameter, because that value would match all IP addresses. If you submit a /0 value for this parameter, Tenable Vulnerability Management returns a 400 Bad Request error message.

Note: Ensure the filter value does not end in a period.
IPv6 Address

An IPv6 address that a scan has associated with the asset record.

This filter supports multiple asset identifiers as a comma-separated list. The IPV6 address must be an exact match. (for example, 0:0:0:0:0:ffff:c0a8:0).

Note: Ensure the filter value does not end in a period.
Last Seen

The date and time at which the asset was last observed as part of a scan.
Licensed

Specifies whether the asset is included in the asset count for the Tenable Vulnerability Management instance.
Name

The asset identifier, assigned based on the availability of specific attributes in logical order.

Note: This filter is selected by default.
Port A port associated with the asset, open or closed. Only applies to Domain Inventory assets.
Record Type The type of asset.
Source

The source of the scan that identified the asset. Possible values are:

  • ASM
  • AWS
  • AWS FA
  • Azure
  • Azure FA
  • Cloud IAC

Note: This filter is selected by default.
Tags

Asset tags, entered in pairs of category and value (for example Network: Headquarters). This includes the space after the colon (:). If there is a comma in the tag name, insert a backslash (\) before the comma. If your tag name includes double quotation marks (" "), use the UUID instead. You can add a maximum of 100 tags.

For more information, see Tags.
Updated Date

The time and date when the asset record was last updated.