Query Builder

In Tenable Vulnerability Management, you can use the Query Builder to create custom lists using filters.

How Queries Work

Queries are joined by Conditions (for example, AND). They have three components:

  • Filter — The search criteria (for example, for a finding, Severity).

  • Operator — The condition to filter on (for example, is not equal to).

  • Value — The value to search (for example, a Severity of High).

Tip: You can nest queries with parentheses. For example, to search for high-severity findings where the VPR is greater than seven or the CVSSv3 Base Score is greater than six, use:

Severity is equal to High AND (VPR is greater than 7 OR CVSSv3 is greater than 6) .

Build a Query

To build a query with the Query Builder:

  1. Click the query box.

    A pane appears with a list of filters, which vary in each section of Tenable Vulnerability Management.

  2. Under Filters, choose a filter.

    A list of operators appears.

  3. Under Operators, choose an operator.

    For filters where the value is text or a number, a hint appears. Otherwise, a list of options appears.

  4. Under Value, type a value or select one from the list.

  5. (Optional) Add another query (that is, type a Condition and then add a Filter, an Operator, and a Value).

    Tip: Under Nesting Operators, select an opening parentheses ( or NOT( to start building a nested query.
  6. Press Enter to run the query.

Edit a Query

To edit a query, do one of the following.

Action

Description

Replace a query component

In the query box, click the component to replace. A list of options appears.

Delete a query component

On the query component, click the X.

Clear a query

On the right side of the query box, click the X.

Keyboard Shortcuts

Use the following keyboard shortcuts in the Query Builder. 

Shortcut

Description

Up Arrow or Down Arrow

Navigate lists of open-ended values such as text or numbers.

Right Arrow or Left Arrow

Move the cursor in your query or choose a date in the date picker.

Enter

Select a query component or date. If no component is selected, apply the query.

Esc

Close a list (for example, the Filters list).

Ctrl-C or ⌘-C

Copy the highlighted text.

Ctrl-V or ⌘-V

Paste your clipboard contents into the Query Builder.

Ctrl-Z or ⌘-Z

Undo the last action.

Ctrl-Y or ⌘-Y

Redo the last action.