Create combination

post

https://cloud.tenable.com/exposure-response/combinations

Creates a combination.

Combinations define the vulnerabilities that your initiatives track. They enable you to specify distinct vulnerability criteria using queries. As vulnerability data changes (e.g., an updated CVSS score), findings may be added to or removed from initiatives based on the defined criteria.

For more information about combinations and initiatives, see Exposure Response in the Tenable Vulnerability Management User Guide.

Requires the Basic [16] user role or one of the following custom role privileges: VM.VM_ER.VM_ER.CREATE for Vulnerability Management or EXPOSURE_MANAGEMENT.EM_ER.EM_ER.CREATE for Exposure Management. See Roles.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

name

string

required

length ≤ 128

Specifies the name of the combination.

description

string

length ≤ 1024

Specifies the description of the combination.

is_public

boolean

required

Specifies whether the combination is public and accessible to other users in your organization.

query

required

Specifies the query or set of queries to apply to the combination. Queries define the vulnerability criteria used to identify specific findings.

Note: You can add up to six queries to a combination.

Choose from the following options:

Single Filter — A simple query filter object that defines a single condition to match findings. Use this structure when only one condition is needed.
Multiple Filters (Logical AND) — An array of query conditions that must all be met. Each object in the array defines a filter condition using a property, operator, and value. A finding must satisfy all of the conditions to match the query.
Multiple Filters (Logical OR) — An array of query conditions where at least one must be met. Each object in the array defines a filter condition using a property, operator, and value. A finding must satisfy at least one of the conditions to match the query.

Headers

string

enum

Defaults to application/json

Generated from available response content types

Allowed:

Responses

403

Returned if you do not have permission to create combinations.

Language

Credentials

Header

Loading…

Response

Click Try It! to start a request and see the response here! Or choose an example:

application/json

text/html

200Returned if the combination was created successfully.

400Returned if your request specified invalid parameters or if your request was improperly formatted.

401Returned if the API keys specified in your request are invalid.

409Returned if there is already a combination with the same name.

429Returned if you attempt to send too many requests in a specific period of time. For more information, see Rate Limiting.

500Returned if an internal server error occurred.