Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

add a method for /rest/deviceInfo call #827

Closed
MAngel666 opened this issue Aug 6, 2024 · 5 comments
Closed

add a method for /rest/deviceInfo call #827

MAngel666 opened this issue Aug 6, 2024 · 5 comments
Labels
follow-up label for items that requires follow-up internally Tenable.sc Tenable.sc Package

Comments

@MAngel666
Copy link

is there a plan to implepment this api call:

https://docs.tenable.com/security-center/api/Device-Information.htm

as a method in pyTenable for SC?

@SteveMcGrath SteveMcGrath added Tenable.sc Tenable.sc Package follow-up label for items that requires follow-up internally labels Aug 6, 2024
@SteveMcGrath
Copy link
Contributor

A couple of things:

  1. That API isn't the most reliable, If you NEED that API, then I would recommend using the repository-specific implementation of it instead: https://pytenable.readthedocs.io/en/stable/api/sc/repositories.html#tenable.sc.repositories.RepositoryAPI.device_info
  2. Why are you querying deviceInfo instead of pulling the data from the analysis API?

@MAngel666
Copy link
Author

  1. Because with this call I can get the information repository independently
  2. I think this call is faster and not as resource "hungry" as the one over analysis API

@SteveMcGrath
Copy link
Contributor

  1. the results it returns arent always "accurate" if the same ip exists in multiple repos.
  2. it may be faster for single host, but would actually be much much slower at scale.

@MAngel666
Copy link
Author

I want to use it for an nagios/icinga check. I want to check the availability of the host in tenable.sc.

  1. thats ok for me
  2. I want to use the check a host

@SteveMcGrath
Copy link
Contributor

So I'm going to mark this as a won't do. That API isn't really designed to be used in this way. SC really doesn't like N-scale problems like this as it may actually create a lot of issues with SC if you have more than a few dozen hosts that get pinged in this manner.

While it's counter-intuitive, its actually a lot faster for SC if you make a single bulk call with the analysis API for all the hosts that your trying to get instead of pulling device info. Both analysis and deviceinfo pull from the same sources, and therefore would have the same resource implications to pull from. The deviceinfo API is specifically meant to drive that single UI element within the UI, and is not something we generally ever recommend folks to use.

@SteveMcGrath SteveMcGrath closed this as not planned Won't fix, can't repro, duplicate, stale Sep 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
follow-up label for items that requires follow-up internally Tenable.sc Tenable.sc Package
Projects
None yet
Development

No branches or pull requests

2 participants