Manage Tags

In Tenable Vulnerability Management, you can interact with and manage your tag values and categories in the following ways.

Create a Tag

Required Tenable Vulnerability Management User Role: Scan Manager or Administrator

Note: When you create a tag from the Tagging page, you can select from a list of generic asset filters to create tag rules. If you want to create a tag based on filters that are specific to certain asset types, Tenable recommends that you create a tag from the Assets page, where you can select additional filters that are specific to each asset type.

Note:Tenable Web App Scanning does not handle permissions reliant on a tag.

On the Create Tag page, you can create one of the following types of tags:

  • Manual — You can create and save a tag to manually apply to individual assets at any time. Tenable does not automatically apply manual tags to assets.

  • Automatic — You can create a tag and add Tag Rules that Tenable Web App Scanning uses to identify and tag matching assets. Tenable Web App Scanning automatically applies the tag to assets identified by the rule at specific intervals.

    Important: You must add a tag rule to the tag in order for Tenable Web App Scanning to identify and tag the appropriate assets.
    Tip: If your tags fail to apply, the tag rules you configured likely returned too many assets for Tenable Web App Scanning to process. For example, a long list of Fully Qualified Domain Names (FQDNs) with wildcards would cover a large number of assets. When this happens, Tenable recommends reducing the number of assets through stricter tag rules. If needed, you can then use an additional tag to join each list.

For more information, see Considerations for Tags with Rules.

Note: You can create up to 100 tag categories, and each category can have up to 100,000 tags.

To create a tag from the Tags page:

  1. In the left navigation, click Settings.

    The Settings page appears.

  2. Click the Tagging tile.

    The Tags page appears. By default, the Categories tab is active.

  3. In the upper-right corner of the page, click the Create Tag button.

    The Create Tag page appears.

  4. Click the Category drop-down box.

  5. In the Add New Category box, type a category.

    As you type, the list filters for matches.

  6. From the drop-down box, select an existing category, or if the category is new, click Create "category name".

    Note: You can create a maximum of 100 categories for your Tenable Web App Scanning instance.

  7. (Optional) In the Category Description box, type a description of the tag category.

  8. In the Value box, type a name for the tag.

    Note: Tag names cannot include commas or be more than 50 characters in length.

    Tip: Tenable recommends that you provide a tag name that directly corresponds with the tag category. For example, if the category is Location, Headquarters would be an appropriate value.

  9. (Optional) In the Value Description box, type a description for the new tag.

  10. Do one of the following:

    • To save the tag as a manual tag:

      1. Click Save.

        Tenable Web App Scanning saves the tag to the tags table.

      2. (Optional) Manually add the tag to one or more assets.

    • To save and apply the tag automatically:

      1. Create a tag rule.

      2. Click Save.

        Tenable Web App Scanning creates the tag, evaluates existing assets, and automatically applies the tag to assets that match the tag rules.

        Note: When you create an automatic tag, Tenable Web App Scanning may take a few minutes to apply the tag and update any excluded assets, depending on the system load and the number of assets.

Override Asset Attributes via Tag

Required Additional License: Tenable Lumin

Required Tenable Vulnerability Management User Role: Scan Manager or Administrator

When creating a tag to apply manually or automatically, you can specify asset attributes you want Tenable Vulnerability Management to override for all assets with the tag.

For example, you can select the ACR attribute to bulk update a specific ACR value to all assets with the tag.

Tip: For information about ACR prioritization, see Manage Tags.

To override asset attributes via tag:

  1. Begin creating a tag.

  2. To automatically override an asset attribute for all assets with this tag, edit the attributes:

    1. Click the Attribute Override toggle to enable automatic application of attributes to assets with this tag.

      The criteria boxes appear.

    2. In the first box, select an attribute (for example, Asset Criticality Rating (ACR)).

    3. In the second box, select a value (for example, 9 (Critical)).

  3. Click Save.

    Tenable Vulnerability Management updates the attribute for all assets with the tag.

    Note: When you override an asset attribute via tags, Tenable Vulnerability Management may take some time to update the attribute on assets with the tag, depending on the system load and the number of assets.

    Tip: For information about how Tenable Vulnerability Management prioritizes tag-updated ACR values, see Asset Criticality Rating (ACR).

Add a Tag to an Asset

Required Tenable Vulnerability Management User Role: Basic, Scan Operator, Standard, Scan Manager, or Administrator

Required Tenable Vulnerability Management Permission: Can Use permission for applicable asset tags.

After you create a tag, you can manually apply it to one or more assets on your Tenable Web App Scanning instance.

To add a tag to an asset:

  1. View your assets. For more information, see Use the Assets Page.

  2. Do one of the following:

    • To add a tag to a single asset:

      1. Select the page where you want to add the tag:

        Location Action
        Assets page

        To add a tag from the Assets page:

        1. In the assets table, right-click the row for the asset to which you want to add a tag.

          The action options appear next to your cursor.

          -or-

          In the assets table, in the Actions column, click the button for the asset to which you want to add a tag.

          The action buttons appear in the row.

        2. Click Add Tags.
        Asset Details page preview plane

        To add a tag from the Asset Details page:

        1. In the assets table, click the row for the asset to which you want to add a tag.

          The preview plan for the asset's Asset Details page appears.

        2. In the left section of the preview plane, next to Tags, click the button.

        Asset Details page

        To add a tag from the Asset Details page:

        1. Access the Asset Details page for the asset from which you want to remove the tag.

          The Asset Details page appears.

        2. Do one of the following:

          • In the upper-right corner, click the Actions button.

            The actions menu appears.

            1. In the actions menu, click Add Tag.

          • In the Tags section, next to Tags, click the button.

    • To add a tag to multiple assets:

      1. In the assets table, select the check box for each asset to which you want to add a tag.

        The action bar appears at the top of the table.

      2. Click Add Tags.

    The Add Tags window appears.

  3. Do one of the following:

    • To add a recently used tag:

      1. Under Recently Used Tags, select the tag you want to add.

        The tag appears in the Tags to be Added box.

        Tip: To remove a tag from Tags to be Added, roll over the tag and click the button.

    • To add a new or existing tag:

      1. In the Category box, type a category.

        As you type, the list filters for matches.

      2. From the drop-down box, select an existing category, or if the category is new, click Create "category name".

        Tip: You can create a generic tag category and apply to different tag values to group your tags. For example, if you create a Location category, you can apply it to multiple values such as Headquarters or Offshore to create a group of location tags.

      3. In the Value box, type a value.

        As you type, the list filters for matches.

      4. From the drop-down box, select an existing value, or if the value is new, click Create "value".

    Note: The system does not save new tags you create by this method until you add the new tags to the asset.

    The tag appears in the Tags to be Added box.

    Tip: To remove a tag from Tags to be Added, roll over the tag and click the button.

  4. Click Add.

    The assets table appears. A confirmation message also appears. Tenable Web App Scanning adds the tags specified in Tags to be Added to the assets.

Remove a Tag from an Asset

Required Tenable Vulnerability Management User Role: Basic, Scan Operator, Standard, Scan Manager, or Administrator

Required Access Group Permissions: Can View, Can Edit

When you manually add a tag to an asset or create a tag that Tenable Web App Scanning automatically applies to that asset based on the tag's rules, you can manually remove from the asset if you want to exclude the asset from the tag's scope.

To remove a tag from an asset:

  1. View your Assets.

  2. (Optional) Refine the table data. For more information, see Tables.

  3. Do one of the following:

    • To remove a tag from single asset:

      1. Select the page where you want to remove the tag from the asset:

        Location Action
        Assets page

        To remove a tag from an asset on the Assets page:

        1. Do one of the following:

          • In the assets table, right-click the row for the asset from which you want to remove a tag.

            The action options appear next to your cursor.

          • In the assets table, in the Actions column, click the button for the asset from which you want to remove a tag.

            The action buttons appear in the row.

        2. Click Remove Tags.

          The Remove Tags window appears.

        3. Under Current Tags, roll over the tag you want to remove and click the button.

          The tag appears in the Tags To Be Removed box.

          Tip: To remove a tag from Tags to be Removed, roll over the tag and click the button.

        Asset Details page

        To remove a tag from an asset on the Asset Details page:

        1. See View Asset Details for the asset from which you want to remove the tag.

        2. Do one of the following:

          • On the left side of the page, in the Tags section, roll over the tag you want to remove and click the button.

          • To remove the tag via the Actions menu:

            1. In the upper-right corner, click the Actions button.

              The actions menu appears.

            2. In the actions menu, click Remove Tags.

              The Remove Tags window appears.

            3. Under Current Tags, roll over the tag you want to remove and click the button.

              The tag appears in the Tags To Be Removed box.

              Tip: To remove a tag from Tags to be Removed, roll over the tag and click the button.

    • To remove a tag from multiple assets:

      1. Search your assets by the tag you want to remove.

      2. Do one of the following:

        • To remove the tag from selected assets, in the assets table, select the check box next to each asset from which you want to remove the tag.

        • To remove the tag from all your assets:

          1. In the assets table header row, select the check box next to the total number of assets.

            The action bar appears at the top of the table.

            All assets on the page are selected.

          2. Click Select all [total number of tagged assets] assets.

            Note: If you do not select all the tagged assets, Tenable Web App Scanning removes the tag from the assets on only the current page.

      3. In the action bar, click the More button.

        A menu appears.

      4. In the actions menu, click Remove Tags.

        The Remove Tags window appears.

      5. Under Current Tags, roll over the tag you want to remove and click the button.

        The tag appears in the Tags To Be Removed box.

        Tip: To remove a tag from Tags to be Removed, roll over the tag and click the button.

  4. Click Remove.

    Tenable Web App Scanning removes the selected tag from the assets.

Edit a Tag or Tag Category

Required Tenable Vulnerability Management User Role: Scan Manager or Administrator

Required Tenable Vulnerability Management Permission: Can Edit, Can Use permission for applicable asset tags.

In the Tagging section, you can edit one or more components of a tag, including the category to which the tag belongs as well as the tag's name and description and any rules applied to the tag.

To edit a tag or tag category:

  1. In the left navigation, click Settings.

    The Settings page appears.

  2. Click the Tagging tile.

    The Tags page appears. By default, the Categories tab is active.

  3. To edit an individual tag:

    1. On the Tags page, click the Values tab.

      The Values page appears, containing a table with all the tags on your Tenable Web App Scanning instance.

    2. In the Values table, click the tag you want to edit.

      The Edit Value page appears.

      Tip: You can also navigate to the Edit Value page from the Edit Category page by clicking the tag you want to review in the Values table.

    3.  (Optional) In the Value box, edit the tag name.
    4.  (Optional) In the Value Description (Optional) box, edit the tag description.

    5. (Optional) Configure the tag rules.

  4. To edit a tag category:

    Note: When you edit a tag category, Tenable Web App Scanning changes the category for all the tags in that category.

    1. In the tag categories table, click the category you want to edit.

      The Edit Category page appears.

    2. In the tag categories table, click the category you want to edit.

      The Edit Category page appears.

    3. (Optional) To edit the name, in the Category box, type a new name.

    4. (Optional) To edit the description, in the Category Description box, type a new description.

  5. Click Save.

    Tenable Web App Scanning saves and applies your changes.

Export Tags

Required Tenable Vulnerability Management User Role: Scan Manager or Administrator

On the Tags page, you can export tag categories and values in CSV or JSON format.

To export tag categories or values:

  1. In the left navigation, click Settings.

    The Settings page appears.

  2. Click the Tagging tile.

    The Tags page appears. By default, the Categories tab is active.

  3. (Optional) Refine the table data. For more information, see Tables.

    Note: You cannot filter the tables on the Tags page.

  4. Do one of the following:

    • To export tag categories:

      1. Select the tag categories that you want to export:

        Export Scope Action
        Selected tag categories

        To export selected tag categories:

        1. In the categories table, select the check box for each tag category you want to export.

          The action bar appears at the top of the table.

        2. In the action bar, click Export.

          Note: The Export link is available for up to 200 selections. If you want to export more than 200 tag categories, select all the tag categories in the list and then click Export.
        A single tag category

        To export a single tag category:

        1. Do one of the following:

          • In the categories table, right-click the row for the tag category you want you want to export.

            The action options appear next to your cursor.

          • In the categories table, in the Actions column, click the button in the row for the tag category you want to export.

            The action buttons appear in the row.

        2. Click Export.

    • To export tag values:

      1. Click the Values tab.

        The Values tab appears. This tab consists of a table that contains all your tag values.

      2. Select the tag values that you want to export:

        Export Scope Action
        Selected tag values

        To export selected tag values:

        1. In the values table, select the check box for each tag value you want to export.

          The action bar appears at the top of the table.

        2. In the action bar, click Export.

          Note: The Export link is available for up to 200 selections. If you want to export more than 200 tag values, select all the tag values in the list and then click Export.
        A single tag value

        To export a single tag value:

        1. Do one of the following:

          • In the categories table, right-click the row for the tag value you want you want to export.

            The action options appear next to your cursor.

          • In the values table, in the Actions column, click the button in the row for the tag value you want to export.

            The action buttons appear in the row.

        2. Click Export.

    The Export plane appears. This plane contains:

    • A text box to configure the export file name.
    • A list of available export formats.
    • A table of configuration options for fields to include in the exported file.

      • Note: By default, all fields are selected.

    • A text box to set the number of days before the export expires.
    • A toggle to configure the export schedule.
    • A toggle to configure the email notification.
  5. In the Name box, type a name for the export file.

  6. Click the export format you want to use:

    Format Description
    CSV

    A CSV text file that contains a list of tag categories or values.

    Note: If your .csv export file includes a cell that begins with any of the following characters (=, +, -, @), Tenable Web App Scanning automatically inputs a single quote (') at the beginning of the cell. For more information, see the related knowledge base article.
    JSON

    A JSON file that contains a nested list of tag categories or values.

    Empty fields are not included in the JSON file.

  7. (Optional) Deselect any fields you do not want to appear in the export file.

  8. In the Expiration box, type the number of days before the export file expires.

    Note: Tenable Vulnerability Management allows you to set a maximum of 30 calendar days for export expiration.

  9. (Optional) To set a schedule for your export to repeat:

    • Click the Schedule toggle.

      • The Schedule section appears.

    • In the Start Date and Time section, select the date and time on which you want the export schedule to start.
    • In the Time Zone drop-down box, select the time zone to which you want the schedule to adhere.
    • In the Repeat drop-down box, select how often you want the export to repeat.
    • In the Repeat Ends drop-down, select the date on which you want the schedule to end.

      Note: If you select never, the schedule repeats until you modify or delete the export schedule.

  10. (Optional) To send email notifications on completion of the export:

    Note: You can enable email notifications with or without scheduling exports.

    • Click the Email Notification toggle.

      The Email Notification section appears.

    • In the Add Recipients box, type the email addresses to which you want to send the export notification.

    • (Required) In the Password box, type a password for the export file. You must share this password with the recipients to allow them to download the file.

      Note: Tenable Web App Scanning sends an email to the recipients and from the link in the email, the recipients can download the file by providing the correct password.

  11. Click Export.

    Tenable Web App Scanning begins processing the export. Depending on the size of the exported data, Tenable Web App Scanning may take several minutes to process the export.

    When processing completes, Tenable Web App Scanning downloads the export file to your computer. Depending on your browser settings, your browser may notify you that the download is complete.

  12. Access the export file via your browser's downloads directory. If you close the export plane before the download finishes, then you can access your export file in the Export Management View.

Search for Assets by Tag via the Tags Table

Required Tenable Vulnerability Management User Role: Scan Operator, Standard, Scan Manager, or Administrator

You can see which assets have a specific tag applied by searching for assets by tag.

To search for assets by tag from the tags table:

  1. In the left navigation, click Settings.

    The Settings page appears.

  2. Click the Tagging tile.

    The Tags page appears. By default, the Categories tab is active.

  3. Click the Values tab.

  4. In the table, click the button.

    The actions menu appears.

  5. Click Search by Tag.

    The Assets page appears and displays the assets table filtered by the tag you selected.

Delete a Tag or Tag Category

Required Tenable Vulnerability Management User Role: Scan Manager or Administrator

Required Tenable Vulnerability Management Permission: Can Edit, Can Use permission for applicable asset tags.

When you delete a tag, Tenable Web App Scanning removes that specific tag from all assets where you applied the tag.

To delete one or more tags:

  1. In the left navigation, click Settings.

    The Settings page appears.

  2. Click the Tagging tile.

    The Tags page appears. By default, the Categories tab is active.

  3. Do one of the following:

    • To delete one or more tags:

      1. Click the Values tab.

        The Values tab appears. This tab consists of a table that contains all your tag values.

      2. Select the tags you want to delete:

        Scope of Deletion Action
        A single tag

        To delete a single tag:

        1. Do one of the following:

          • In the tags table, right-click the row for the tag you want to delete.

            The action options appear next to your cursor.

          • In the tags table, in the Actions column, click the button for the tag you want to delete.

            The action buttons appear in the row.

        2. Click Delete.
        Multiple tags

        To delete multiple tags:

        1. Click the Values tab.

          The Values tab appears, displaying a table with all the tags on your Tenable Web App Scanning instance in Category:Value format.

        2. In the tags table, select the check box for each tag you want to delete.

          The action bar appears at the top of the table.

        3. In the action bar, click Delete.

    • To delete one or more tag categories:

      1. Select the tag categories that you want to delete:

        Scope of Deletion Action
        A single tag category

        To delete a single tag category:

        1. In the tag categories table, in the Action column , click the More button.

          A menu appears.

        2. Click the Delete button.

          A confirmation window appears, asking if you are sure that you want to delete the category and all associated tags and assignments.
        Multiple tag categories

        To delete multiple tag categories:

        1. In the tag categories table, select the check box for each category you want to delete.

          The action bar appears at the bottom of the pagetop of the table.

        2. In the action bar, click the Delete button.

          A confirmation window appears, asking if you are sure that you want to delete the category and all associated tags and assignments..

  4. Click Delete.

    Tenable Web App Scanning deletes the tag value or category, any associated tags, and removes those tags from all assets where you applied them.