Skip to content

tenable_sc: lastSeen filter is incorrectly formatted and uses incorrect time #10419

@efd6

Description

@efd6

There is a syntax discordance with the docs and the implementation in the integration; the docs have date ranges with the format "#:#" while we are constructing "#-#" where # is a range endpoint.

In addition to this, the documentation explains that the start and end time points in the range are days in the past relative to today, while the integration presents the time values as absolute times in unix time stamps based on the lastSeen field in the returned documents from the API.

Metadata

Metadata

Assignees

Labels

Integration:tenable_scTenable Security CenterTeam:Security-Service IntegrationsSecurity Service Integrations team [elastic/security-service-integrations]bugSomething isn't working, use only for issues

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions