Create a Manual or Automatic Tag

Required Tenable Vulnerability Management User Role: Scan Manager or Administrator

Note: When you create a tag from the Tagging page, you can select from a list of generic asset filters to create tag rules. If you want to create a tag based on filters that are specific to certain asset types, Tenable recommends that you create a tag from the Assets page, where you can select additional filters that are specific to each asset type.

On the Create Tag page, you can create one of the following types of tags:

Manual — You can create and save a tag to manually apply to individual assets at any time. Tenable does not automatically apply manual tags to assets.
Automatic — You can create a tag and add Tag Rules that Tenable Vulnerability Management uses to identify and tag matching assets. Tenable Vulnerability Management automatically applies the tag to assets identified by the rule at specific intervals.

Important: You must add a tag rule to the tag in order for Tenable Vulnerability Management to identify and tag the appropriate assets.

Tip: If your tags fail to apply, the tag rules you configured likely returned too many assets for Tenable Vulnerability Management to process. For example, a long list of Fully Qualified Domain Names (FQDNs) with wildcards would cover a large number of assets. When this happens, Tenable recommends reducing the number of assets through stricter tag rules. If needed, you can then use an additional tag to join each list.

For more information, see Considerations for Tags with Rules.

Note: You can create up to 100 tag categories, and each category can have up to 100,000 tags.

To create a tag from the Tags page:

In the left navigation, click Settings.

The Settings page appears.
Click the Tagging tile.

The Tags page appears. On this page, you can view your asset tag categories and values.

The Categories tab is active.
In the upper-right corner of the page, click the Create Tag button.

The Create Tag page appears.
Click the Category drop-down box.
In the Add New Category box, type a category.

As you type, the list filters for matches.
From the drop-down box, select an existing category, or if the category is new, click Create "category name".

Note: You can create a maximum of 100 categories for your Tenable Vulnerability Management instance.
(Optional) In the Category Description box, type a description of the tag category.
In the Value box, type a name for the tag.

Note: Tag names cannot include commas or be more than 50 characters in length.

Tip: Tenable recommends that you provide a tag name that directly corresponds with the tag category. For example, if the category is Location, Headquarters would be an appropriate value.
(Optional) In the Value Description box, type a description for the new tag.
Do one of the following:
To save the tag as a manual tag:
1. Click Save.
  
  Tenable Vulnerability Management saves the tag to the tags table.
2. (Optional) Manually add the tag to one or more assets.
To save and apply the tag automatically:
1. Create a tag rule.
2. Click Save.
  
  Tenable Vulnerability Management creates the tag, evaluates existing assets, and automatically applies the tag to assets that match the tag rules.
  
  Note: When you create an automatic tag, Tenable Vulnerability Management may take a few minutes to apply the tag and update any excluded assets, depending on the system load and the number of assets.

Tip: When you create a tag, Tenable Vulnerability Management automatically creates and assigns "Tag:value owner permissions" that allow you to manage the tag. If you are an administrator, you can give other users or groups this permission via the Permissions page.