Copy page

Asset Inventory

Tenable Asset Inventory

Retrieves all assets and related metadata from Tenable for integration into third-party systems, collecting comprehensive data on each asset.

Sync Type: Incremental

Requirements

• Log in to Tenable.io and go to the Create a service account page.
• Enter Monad Service as the name.
• Fill out the rest of the service account fields using your organization's usual process.
• Set the Role to Scan Manager and click Finish.
• Click the new service user and select API Keys on the left.
• Copy the access key and secret key. You'll need them when you set up the Monad connector.

Details

Monad uses the updated_at field to determine which assets to export this field is determined by the last time the export was run. If the input has never been run, it will export all assets.

Configuration

The following configuration defines the input parameters. Each field's specifications, such as type, requirements, and descriptions, are detailed below.

Settings

Setting	Type	Required	Description
Backfill Start Time	string	No	The date to start fetching data from. If not specified, no past records will be fetched.
API Rate Limit	object	No	Optional limit on the connector's outbound request rate to the source API. Leave blank to use the connector's default behavior. See API Rate Limiting for the field format, limits, and how to choose a value.

Secrets

Secret	Type	Required	Description
Access Key	string	Yes	Access Key for the Tenable API. This is required to authenticate requests.
Secret Key	string	Yes	Secret Key for the Tenable API. This is required to authenticate requests.

Related Articles

• https://developer.tenable.com/reference/exports-assets-download-chunk
• https://docs.tenable.com/vulnerability-management/Content/Settings/access-control/CreateAUserAccount.htm
• https://developer.tenable.com/reference/exports-assets-request-export
• https://developer.tenable.com/reference/exports-assets-export-status
• https://developer.tenable.com/reference/exports-assets-download-chunk

Sample Record

Code
{
  "id": "b19b4fd5-6c20-4082-c50a-5bc511d4a03f",
  "has_agent": false,
  "has_plugin_results": true,
  "created_at": "2021-02-01T08:04:40.311Z",
  "terminated_at": null,
  "terminated_by": null,
  "updated_at": "2023-01-07T23:28:03.206Z",
  "deleted_at": null,
  "deleted_by": null,
  "first_seen": "2025-08-11T23:46:44.837946Z",
  "last_seen": "2025-08-11T23:46:44.837952Z",
  "first_scan_time": "2025-08-11T23:46:44.837953Z",
  "last_scan_time": "2025-08-11T23:46:44.837955Z",
  "last_authenticated_scan_date": null,
  "last_licensed_scan_date": "2025-08-11T23:46:44.837956Z",
  "last_scan_id": "5d2a6b84-96dd-7604-bf66-420bbea7fff5",
  "last_schedule_id": "template-67f498e8-2f74-1065-5419-d526a40b3c446594f84aecddf850",
  "azure_vm_id": null,
  "azure_resource_id": null,
  "gcp_project_id": null,
  "gcp_zone": null,
  "gcp_instance_id": null,
  "aws_ec2_instance_ami_id": null,
  "aws_ec2_instance_id": null,
  "agent_uuid": null,
  "bios_uuid": null,
  "network_id": "00000000-0000-0000-0000-000000000000",
  "network_name": "Default",
  "aws_owner_id": null,
  "aws_availability_zone": null,
  "aws_region": null,
  "aws_vpc_id": null,
  "aws_ec2_instance_group_name": null,
  "aws_ec2_instance_state_name": null,
  "aws_ec2_instance_type": null,
  "aws_subnet_id": null,
  "aws_ec2_product_code": null,
  "aws_ec2_name": null,
  "mcafee_epo_guid": null,
  "mcafee_epo_agent_guid": null,
  "servicenow_sysid": null,
  "bigfix_asset_id": null,
  "agent_names": [],
  "installed_software": [],
  "ipv4s": [
    "192.210.93.21"
  ],
  "ipv6s": [],
  "fqdns": [],
  "mac_addresses": [
    "ae:d2:7c:d8:93:4c"
  ],
  "netbios_names": [],
  "operating_systems": [
    "macOS Catalina"
  ],
  "system_types": [
    "Server"
  ],
  "hostnames": [],
  "ssh_fingerprints": [],
  "qualys_asset_ids": [],
  "qualys_host_ids": [],
  "manufacturer_tpm_ids": [],
  "symantec_ep_hardware_keys": [],
  "sources": [
    {
      "name": "NESSUS_SCAN",
      "first_seen": "2025-08-11T23:46:44.838032Z",
      "last_seen": "2025-08-11T23:46:44.838033Z"
    }
  ],
  "tags": [
    {
      "uuid": "f1a11438-e18d-3e9e-fbe2-d412110cde95",
      "key": "scan",
      "value": "external",
      "added_by": "461d3cab-02c0-4115-9b27-8e71778a41ea",
      "added_at": "2025-08-11T23:46:44.838049Z"
    },
    {
      "uuid": "dfe83932-5325-0b29-724d-420c57c9627b",
      "key": "Tags_Converted_From_Access_Groups_more_more_more_more_more_more_more",
      "value": "AG1",
      "added_by": "5cb33990-1188-41e4-997e-50818766fe85",
      "added_at": "2025-08-11T23:46:44.838063Z"
    },
    {
      "uuid": "a49287da-730c-22f2-fff7-007245d79d2d",
      "key": "Tags_Converted_From_Access_Groups_more_more_more_more_more_more_more",
      "value": "Home",
      "added_by": "5cb33990-1188-41e4-997e-50818766fe85",
      "added_at": "2025-08-11T23:46:44.838092Z"
    }
  ],
  "network_interfaces": [
    {
      "name": "UNKNOWN",
      "virtual": null,
      "aliased": null,
      "fqdns": [],
      "mac_addresses": [
        "2e:d9:31:96:0f:15"
      ],
      "ipv4s": [
        "192.204.100.109"
      ],
      "ipv6s": []
    }
  ],
  "open_ports": [],
  "acr_score": "-1",
  "exposure_score": "-1"
}

Sync frequency

By default this input polls approximately every 10 seconds, with each sync beginning after the previous one completes. A cron schedule configured on the pipeline overrides this cadence. See Input Sync Frequency for details.

Community transforms

The Monad Transforms Repository has ready-made transforms for this input. Import one into your organization, then add it to a pipeline after this input.

Format	Transform
OCSF v1.9.0	Tenable Assets to OCSF v1.9.0
ECS v9.5.0	Tenable Assets to ECS v9.5.0
CEF	Tenable Assets to CEF

Older OCSF versions (v1.1.0) are also in the repository. CEF transforms emit an intermediate record; add the CEF Serializer transform after one to produce the CEF:0 string.