Copy page

Tenable

Asset Inventory

Retrieves all assets and related metadata from Tenable for integration into third-party systems, collecting comprehensive data on each asset.

Sync Type: Incremental

Requirements

• Log in to Tenable.io and go to the Create a service account page.
• Enter Monad Service as the name.
• Fill out the rest of the service account fields using your organization's usual process.
• Set the Role to Scan Manager and click Finish.
• Click the new service user and select API Keys on the left.
• Copy the access key and secret key. You'll need them when you set up the Monad connector.

Details

Monad uses the updated_at field to determine which assets to export this field is determined by the last time the export was run. If the input has never been run, it will export all assets.

Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

Settings

Setting	Type	Required	Description
Backfill Start Time	string	No	The date to start fetching data from. If not specified, no past records will be fetched.
API Rate Limit	object	No	Optional limit on the connector's outbound request rate to the source API. Leave blank to use the connector's default behavior. See API Rate Limiting for the field format, limits, and how to choose a value.

Secrets

Secret	Type	Required	Description
Access Key	string	Yes	Access Key for the Tenable API. This is required to authenticate requests.
Secret Key	string	Yes	Secret Key for the Tenable API. This is required to authenticate requests.

OCSF Conversion

The following JQ transformation converts Tenable Asset data to OCSF Version 1.1 compliant format.

Related Articles

• https://developer.tenable.com/reference/exports-assets-download-chunk
• https://docs.tenable.com/vulnerability-management/Content/Settings/access-control/CreateAUserAccount.htm
• https://developer.tenable.com/reference/exports-assets-request-export
• https://developer.tenable.com/reference/exports-assets-export-status
• https://developer.tenable.com/reference/exports-assets-download-chunk

Sample Record

Code
{
  "id": "b19b4fd5-6c20-4082-c50a-5bc511d4a03f",
  "has_agent": false,
  "has_plugin_results": true,
  "created_at": "2021-02-01T08:04:40.311Z",
  "terminated_at": null,
  "terminated_by": null,
  "updated_at": "2023-01-07T23:28:03.206Z",
  "deleted_at": null,
  "deleted_by": null,
  "first_seen": "2025-08-11T23:46:44.837946Z",
  "last_seen": "2025-08-11T23:46:44.837952Z",
  "first_scan_time": "2025-08-11T23:46:44.837953Z",
  "last_scan_time": "2025-08-11T23:46:44.837955Z",
  "last_authenticated_scan_date": null,
  "last_licensed_scan_date": "2025-08-11T23:46:44.837956Z",
  "last_scan_id": "5d2a6b84-96dd-7604-bf66-420bbea7fff5",
  "last_schedule_id": "template-67f498e8-2f74-1065-5419-d526a40b3c446594f84aecddf850",
  "azure_vm_id": null,
  "azure_resource_id": null,
  "gcp_project_id": null,
  "gcp_zone": null,
  "gcp_instance_id": null,
  "aws_ec2_instance_ami_id": null,
  "aws_ec2_instance_id": null,
  "agent_uuid": null,
  "bios_uuid": null,
  "network_id": "00000000-0000-0000-0000-000000000000",
  "network_name": "Default",
  "aws_owner_id": null,
  "aws_availability_zone": null,
  "aws_region": null,
  "aws_vpc_id": null,
  "aws_ec2_instance_group_name": null,
  "aws_ec2_instance_state_name": null,
  "aws_ec2_instance_type": null,
  "aws_subnet_id": null,
  "aws_ec2_product_code": null,
  "aws_ec2_name": null,
  "mcafee_epo_guid": null,
  "mcafee_epo_agent_guid": null,
  "servicenow_sysid": null,
  "bigfix_asset_id": null,
  "agent_names": [],
  "installed_software": [],
  "ipv4s": [
    "192.210.93.21"
  ],
  "ipv6s": [],
  "fqdns": [],
  "mac_addresses": [
    "ae:d2:7c:d8:93:4c"
  ],
  "netbios_names": [],
  "operating_systems": [
    "macOS Catalina"
  ],
  "system_types": [
    "Server"
  ],
  "hostnames": [],
  "ssh_fingerprints": [],
  "qualys_asset_ids": [],
  "qualys_host_ids": [],
  "manufacturer_tpm_ids": [],
  "symantec_ep_hardware_keys": [],
  "sources": [
    {
      "name": "NESSUS_SCAN",
      "first_seen": "2025-08-11T23:46:44.838032Z",
      "last_seen": "2025-08-11T23:46:44.838033Z"
    }
  ],
  "tags": [
    {
      "uuid": "f1a11438-e18d-3e9e-fbe2-d412110cde95",
      "key": "scan",
      "value": "external",
      "added_by": "461d3cab-02c0-4115-9b27-8e71778a41ea",
      "added_at": "2025-08-11T23:46:44.838049Z"
    },
    {
      "uuid": "dfe83932-5325-0b29-724d-420c57c9627b",
      "key": "Tags_Converted_From_Access_Groups_more_more_more_more_more_more_more",
      "value": "AG1",
      "added_by": "5cb33990-1188-41e4-997e-50818766fe85",
      "added_at": "2025-08-11T23:46:44.838063Z"
    },
    {
      "uuid": "a49287da-730c-22f2-fff7-007245d79d2d",
      "key": "Tags_Converted_From_Access_Groups_more_more_more_more_more_more_more",
      "value": "Home",
      "added_by": "5cb33990-1188-41e4-997e-50818766fe85",
      "added_at": "2025-08-11T23:46:44.838092Z"
    }
  ],
  "network_interfaces": [
    {
      "name": "UNKNOWN",
      "virtual": null,
      "aliased": null,
      "fqdns": [],
      "mac_addresses": [
        "2e:d9:31:96:0f:15"
      ],
      "ipv4s": [
        "192.204.100.109"
      ],
      "ipv6s": []
    }
  ],
  "open_ports": [],
  "acr_score": "-1",
  "exposure_score": "-1"
}

Sync frequency

By default this input polls approximately every 10 seconds, with each sync beginning after the previous one completes. A cron schedule configured on the pipeline overrides this cadence. See Input Sync Frequency for details.