Skip to content

tenable_io: add severity option for vulnerability data stream - #15394

Merged
chemamartinez merged 4 commits into
elastic:mainfrom
chemamartinez:8664-tenable-select-severity
Sep 22, 2025
Merged

tenable_io: add severity option for vulnerability data stream#15394
chemamartinez merged 4 commits into
elastic:mainfrom
chemamartinez:8664-tenable-select-severity

Conversation

@chemamartinez

Copy link
Copy Markdown
Contributor

Proposed commit message

Add a filter to select the severity level of collected vulnerabilites
for the vulnerability data stream.

Default value includes all possible levels:
- info
- low
- medium
- high
- critical

Same as default value for the API[1].

[1] https://developer.tenable.com/reference/exports-vulns-request-export

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Related issues

Screenshots

image
@chemamartinez chemamartinez self-assigned this Sep 18, 2025
@chemamartinez chemamartinez added enhancement New feature or request Integration:tenable_io Tenable Vulnerability Management Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] labels Sep 18, 2025
@chemamartinez
chemamartinez marked this pull request as ready for review September 18, 2025 12:24
@chemamartinez
chemamartinez requested a review from a team as a code owner September 18, 2025 12:24
@elasticmachine

Copy link
Copy Markdown

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@elastic-vault-github-plugin-prod

elastic-vault-github-plugin-prod Bot commented Sep 18, 2025

Copy link
Copy Markdown
Contributor

🚀 Benchmarks report

Package tenable_io 👍(1) 💚(3) 💔(1)

Expand to view
Data stream Previous EPS New EPS Diff (%) Result
plugin 6060.61 4716.98 -1343.63 (-22.17%) 💔

To see the full report comment with /test benchmark fullreport

@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Sep 18, 2025
post_request(
state.url.trim_right("/") + "/vulns/export", "application/json",
'{"num_assets":' + state.batch_size.encode_json() + ',"filters":{"since": ' + state.?cursor.last_event_time.orValue(int(now - duration(state.initial_interval))).encode_json() + ',"state": ["open","reopened","fixed"]}}'
'{"num_assets":' + state.batch_size.encode_json() + ',"filters":{"since":' + state.?cursor.last_event_time.orValue(int(now - duration(state.initial_interval))).encode_json() + ',"state":["open","reopened","fixed"],"severity":' + state.?severity_level.optMap(l, "[" + l.map(item, "\"" + item + "\"").join(",") + "]").orValue("[]") + '}}'

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is getting long. I'd prefer that this be a struct that gets marshalled.

@chemamartinez
chemamartinez requested a review from efd6 September 19, 2025 09:12
@elasticmachine

Copy link
Copy Markdown

💚 Build Succeeded

History

cc @chemamartinez

@chemamartinez
chemamartinez merged commit 39a4aec into elastic:main Sep 22, 2025
9 checks passed
@elastic-vault-github-plugin-prod

Copy link
Copy Markdown
Contributor

Package tenable_io - 4.3.0 containing this change is available at https://epr.elastic.co/package/tenable_io/4.3.0/

tehbooom pushed a commit to tehbooom/integrations that referenced this pull request Nov 19, 2025
…c#15394)

Add a filter to select the severity level of collected vulnerabilites
for the vulnerability data stream.

Default value includes all possible levels:
- info
- low
- medium
- high
- critical

Same as default value for the API[1].

[1] https://developer.tenable.com/reference/exports-vulns-request-export
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. enhancement New feature or request Integration:tenable_io Tenable Vulnerability Management Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

4 participants