Query Builder

In Tenable Vulnerability Management, you can use the Query Builder to create custom lists using filters. Sections using the Query Builder include Vulnerability Intelligence and Exposure Response.

How Queries Work

Queries are joined by Conditions (for example, AND). They have three components:

  • Filter — The search criteria (for example, for a finding, Severity).

  • Operator — The condition to filter on (for example, is not equal to).

  • Value — The value to search (for example, a Severity of High).

Tip: You can nest queries with parentheses. For example, to search for high-severity findings where the VPR is greater than seven or the CVSSv3 Base Score is greater than six, use:

Severity is equal to High AND (VPR is greater than 7 OR CVSSv3 is greater than 6) .

Build a Query

To build a query with the Query Builder:

  1. Click a query box.

    The Filters list appears. The filters you can use depend on which section of Tenable Vulnerability Management you are using.

  2. In the Filters list, choose a filter.

    The Operators list appears.

  3. In the Operators list, choose an operator.

    For a filter where the value is text or a number, the Value Hint box appears. Otherwise, the Value Options list appears.

  4. Type a Value or select one from the list.

  5. (Optional) Add another query (that is, type a Condition and then add a Filter, an Operator, and a Value).

  6. Press Enter.

Edit a Query

To edit a query, do one of the following.

Action

Description

Replace a query component

In the query box, click the component to replace. A list of options appears.

Delete a query component

On the query component, click the X.

Clear a query

On the right side of the query box, click Clear.

Keyboard Shortcuts

Use the following keyboard shortcuts in the Query Builder. 

Shortcut

Description

Up Arrow or Down Arrow

Navigate lists of open-ended values such as text or numbers.

Right Arrow or Left Arrow

Move the cursor in your query or choose a date in the date picker.

Enter

Select a query component or date. If no component is selected, apply the query.

Esc

Close a list (for example, the Filters list).

Ctrl-C

Copy the highlighted text.

Ctrl-V

Paste your clipboard contents into the Query Builder.

Ctrl-Z

Undo the last action.

Ctrl-Y

Redo the last action.