Tenable dashboard searches are designed to work for both products. Your search is appending both io and sc products. One of them should be enough for display. You can try removing where command that filters last_found field today's events to test the results. I had the same problem and made changes on the queries to make it work. Please try below; | inputlookup io_vuln_data_lookup | eval today = round(relative_time(now(), "-0d@d")) | where synopsis!="" AND synopsis!="N/A" AND synopsis!="n/a" AND synopsis!="None" | eval product="Tenable.io" | search (product="*") (severity="*") | append [| inputlookup sc_vuln_data_lookup | eval today = round(relative_time(now(), "-0d@d")) | where synopsis!="" AND synopsis!="N/A" AND synopsis!="n/a" AND synopsis!="None" | eval product="Tenable.sc" | search (product="*") (severity="*")] | eval state=if(state="fixed","fixed", "not fixed") | stats dc(synopsis) as Count by state | stats sum(Count) as "Total Vulnerabilities Found Today" Also you should run "Tenable SC Vuln Data - All Time" all-time report once to create the lookups.
... View more
