Using Find / Update in SecurityCenter Reports

A “How To” Guide for SecurityCenter

Updating Filters in a Report

• SecurityCenter reporting is very powerful because of many filtering options available.

• In some cases, changing the filters can be difficult.

• Tenable provides a “Find/Update” button for several filters.

• Address• Repository• Scan Policy• Severity• IAVM ID

• DNS Name• Asset• Audit File• CVE ID

Find / Update Filter

The Find / Update tool can update the following filters:

Where is this?

• The Find / Update link is located on the top of the “Definition” tab when editing a report.

Find / Update Filters

Search Filters

• This example will update the audit file field.• Click Add Filter, and click on Audit File

Is Set or Is Not Set, that is the question?

• This example uses a search for filters where the Audit File field is not used or is empty.

• In Search Filters, add a filter to look for the unused field.– “Audit File” “Is Not Set”

• In Update Action, add an action to add the audit filter to the filters.– “Audit File” “Is Set” “File Name”

Search Filters

• The Search Filter is going to look for the filter condition currently in use that needs to be updated.

• In this example, an update to the Audit File field is reviewed.

• If the audit file field is not currently in use, then select the “Is Not Set”.

• Please note that the “Save” button must be selected.• In this example, the audit file field is not set.

Matching Filter Found

• After clicking on the Save button, the matching filters in the report will be shown below.

Add Action

• The next step is to add an action.• Click “Add Action”• To add the audit file filter, choose “Is Set

To”, then select the appropriate audit file.• Click the Save button

Update Action Saved

• The update action is saved, yet is not applied.• Now review the settings that are going to

change.

Update

• To apply the updates, click the Update button.• Click Close to complete the update process.

Verify the Filter Change

• Navigate to any of the components in the report, and verify the filter has changed.

For Questions Contact

Tenable Customer Support Portal

or

Cody Dumont in the SecurityCenter Section of the Tenable Discussion Forums