Configuring the BlueApp for Tenable.io

Role Availability Read-Only Investigator Analyst Manager

To configure the BlueApp for Tenable.io in USM Anywhere, you need to have the Tenable host URL, access key, and secret key.

Set Up Your Tenable.io API

Before USM Anywhere can collect information from Tenable.io, you must first connect the BlueApp with the Tenable.io API.

To acquire API keys from Tenable.io

  1. Log in to Tenable.io Login Page using a valid user account.
    This account must be a member of the Administrators role in Tenable.io.
  2. Generate the API keys according to the Generate API Keys.
  3. Copy the access key and secret key to your clipboard or a secure location. You will need to enter them in USM Anywhere to configure the BlueApp.

Configure BlueApp for Tenable.io in USM Anywhere

To enable the BlueApp for Tenable.io

  1. In USM Anywhere, go to Data Sources > BlueApps.
  2. Click the Available Apps tab.
  3. Search for the BlueApp, and then click the tile.
  4. Click Configure API.
  5. If you have more than one deployed USM Anywhere Sensor, select the sensor that you want to use for the enabled BlueApp.

    BlueApps operate through a deployed sensor and use APIs to integrate with the connected third-party technology. Select the sensor that can access the integration endpoint. The HTTPS connections to the API will originate from this sensor, so it is important to make sure the sensor has network access to the BlueApp API endpoints.

  6. Enter the host URL, access key, and key secret.

  7. Click Save.

BlueApp Log Collection

Once the BlueApp has been configured, you can choose to have USM Anywhere collect logs from the app on a regular basis.

To configure log collection for the BlueApp

  1. Go to Settings > Scheduler.
  2. In the Job Scheduler, search for the BlueApp on the sensor to which it was deployed.
  3. In the enabled column, click the icon for the inactive collection job.

    The icon turns green, and collection is enabled.

  4. (Optional.) Click the icon to customize the frequency of the event collection.