Manage Combinations

Required User Role: Administrator

When you create initiatives, you assign combinations to define what resources they track in your environment. Combinations use queries to search for specific findings. They work together with asset tags, which define the assets in scope.

You can use the query builder to create your own combinations, apply Tenable combinations, or combine the two. When you create combinations, you can save them as templates to share with your organization.

Note: Tenable limits the number of combinations you can create to:
  • 50 total combinations per user and
  • 100 total combinations per organization.

To access the Manage Combinations page:

  1. In the left navigation, click Menu Exposure Response > Manage Combinations.

    The Exposure Response page appears with the Manage Combinations tab open.

Create Combinations

When you create initiatives, unless you want to use existing combinations, you must first create new ones in the Manage Combinations tab.

To create new combinations:

  1. Access the Manage Combinations page.

  2. In the upper-right corner of the left panel, click the button.

    The Create an Exposure Response Combination pane appears.

  3. Configure the following options:

    Option Description
    Name Type a combination name.
    Description Type a description, for example High CvSS score.
    Query

    In the query box, use the Query Builder to define what resources the combination searches for. For example, CVSSv3 Base Score is greater than 6.

    Note: For any combination, the system supports a maximum of six queries separated by operators.
    Add to Initiatives

    (Optional) Choose a current initiative in which to add the combination.

    Note: Initiatives with multiple combinations use a logical OR filter. The data displayed will include all results from each of the individual combinations.
    Shared (Optional) Enable this toggle to share the combination with your organization in the Shared tab.

  4. Click Save.

    The combination appears in the Combinations list in the left panel.

Copy Shared Combinations

In the Exposure Response section, the Shared tab contains combinations shared by your organization. When you want to customize a combination that you did not create, you can copy it to My Combinations and then edit the copy.

To copy and edit a shared combination:

  1. Access the Manage Combinations page.

  2. In the left panel, click Shared.

  3. In the tile for the combination you want to copy, click the button.

    A menu appears.

  4. Click Copy to my combinations.

    Tenable Vulnerability Management copies the shared combination and lists it in the My Combinations section of the Combinations list.

Edit a Combination

As an administrator, you can edit non-Tenable combinations. As a non-administrator, you can edit your own combinations.

To edit a combination:

  1. Access the Manage Combinations page.

  2. In the left pane, in the combination to edit, click and select Edit.

  3. In the Edit Combination panel that appears, change the options.

    Note: To remove a combination from a current initiative, edit the initiative instead.

  4. Click Save.

    Tenable Vulnerability Management saves your changes to the combination.

Delete a Combination

As an administrator, you can delete non-Tenable combinations. As a non-administrator, in most cases, you can delete your own combinations.

Administrator Non-administrator

You can delete any non-Tenable combination.

Note: When a combination is the only data source for an initiative, deleting it pauses the initiative.
 You can delete unshared combinations from the My Combinations tab.
You can delete unused Shared combinations that you created.

To delete a combination:

  1. Access the Manage Combinations page.

  2. In the left pane, in the combination to edit, click and select Delete.

  3. In the confirmation dialog that appears, click Delete again.

    Tenable Vulnerability Management deletes the combination.