Dashboard Toolbox - AssetView: Scanning Activity Management (v1.0)

Document created by Felix Jimenez Employee on Oct 6, 2018Last modified by Felix Jimenez Employee on Oct 29, 2018
Version 23Show Document
  • View in full screen mode

fjimenez This page contains information to create a Scorecard dashboard leveraging the AssetView interface and data in your Qualys Vulnerability Management subscription.  

This dashboard is part of AssetView Dashboard Program, If you have any questions regarding the content, please comment below or Contact Support - Technical Assistance Inquiry Form | Qualys, Inc.                                                                            

                     

This AssetView Dashboard will enable you to be more pro-active in your Scanning Activity Management and Troubleshooting of Qualys.

Get a quick easy glance to KPIs for Scanning Activity.

 

Dashboard Demonstration Images:

* The Pre-built Dashboard JSON file can be found attached below ready for download & import into your Qualys subscription *

 

 

* * * Requirements * * *

The following Widgets Require Asset Search Tags to be created for each:  

Click the following link for assistance in converting time: Google Time Converter

The only section needed to be changed in the code for your desired time is in RED

Host Scan Time Tags:

Scanned in 30 - DaysScanned in 90 - DaysNOT-Scanned in 30 - DaysNOT-Scanned in 90 - Days
TAG-NAME:  Scanned in 30-DTAG-NAME:  Scanned in 90-DTAG-NAME:  NOT-Scanned in 30-DTAG-NAME:  NOT-Scanned in 90-D

TAG-CODE: Copy paste under Asset Search rule:

TAG-CODE: Copy paste under Asset Search rule:TAG-CODE: Copy paste under Asset Search rule:TAG-CODE: Copy paste under Asset Search rule:

<?xml version="1.0" encoding="UTF-8"?>
<TAG_CRITERIA>
<LAST_SCAN_DATE>
<SEARCH_TYPE>WITHIN</SEARCH_TYPE>
<DAYS>30</DAYS>
</LAST_SCAN_DATE>
</TAG_CRITERIA>

<?xml version="1.0" encoding="UTF-8"?>

<TAG_CRITERIA>
<LAST_SCAN_DATE>
<SEARCH_TYPE>WITHIN</SEARCH_TYPE>
<DAYS>90</DAYS>
</LAST_SCAN_DATE>
</TAG_CRITERIA>

<?xml version="1.0" encoding="UTF-8"?>

<TAG_CRITERIA>
<LAST_SCAN_DATE>
<SEARCH_TYPE>NOT_WITHIN</SEARCH_TYPE>
<DAYS>30</DAYS>
</LAST_SCAN_DATE>
</TAG_CRITERIA>

<?xml version="1.0" encoding="UTF-8"?>
<TAG_CRITERIA>
<LAST_SCAN_DATE>
<SEARCH_TYPE>NOT_WITHIN</SEARCH_TYPE>
<DAYS>90</DAYS>
</LAST_SCAN_DATE>
</TAG_CRITERIA>

 

 

 

 

API Guide  - Evaluate Tag: 

Asset Mgmt and Tagging v2 API

See Page:  31

* * * Re-Evaluate the Tags as needed per Scan Candance * * *

Evaluate all tags that have ASSET_SEARCH tag rules.

API Request:  **Note the POD API url & the file.xml needs to be created**

POD 1: curl -u "USERNAME:PASSWORD" -H "content-type: text/xml" -X "POST" --data-binary @- "https://qualysapi.qualys.com/qps/rest/2.0/evaluate/am/tag" < file.xml

POD 2: curl -u "USERNAME:PASSWORD" -H "content-type: text/xml" -X "POST" --data-binary @- "https://qualysapi.qg2.apps.qualys.com/qps/rest/2.0/evaluate/am/tag< file.xml

POD 3: curl -u "USERNAME:PASSWORD" -H "content-type: text/xml" -X "POST" --data-binary @- "https://qualysapi.qg3.apps.qualys.com/qps/rest/2.0/evaluate/am/tag< file.xml

Request POST data:   file.xml
<?xml version="1.0" encoding="UTF-8" ?>
<ServiceRequest>
<filters>
<Criteria field="ruleType"
operator="EQUALS">ASSET_SEARCH</Criteria>
</filters>
</ServiceRequest>

 

 

Example of Tags & Widget Structure & Trending:

Open the desired widget in edit mode, by selecting the 3 lines on the top right of the widget,

and clicking on Configure Widget. Then select the Collect trend data check box.

 

 

Qualys - Training Videos:

Self-Paced Class: Vulnerability Management Asset Tags

Self-Paced Class: AssetView and Threat Protection

AssetView Dashboards

 

 

Help Link:

POD - 1 - Apply Tags to Organize Your Assets

POD - 2 - Apply Tags to Organize Your Assets

POD - 3 - Apply Tags to Organize Your Assets

 

 

 

More to Come ... 

 

References: 

Looking for additional Qualys Documentation use the Resource link in the Qualys Portal (Help > Resources)

 

Related community Post:

 

Additional AssetView Dashboards:#performance_mgmt

Dashboard Toolbox - Asset View: How To - Importing Dashboard json 

- - - - - - - - - - - - - - - - - - - - - - - - - - - -- - - - - - - - - - - - - - - - - - - - - - - -

Dashboard Toolbox - AssetView: Performance Management (v1.0)
Dashboard Toolbox - AssetView: Host Scan Time Management (v1.0)
Dashboard Toolbox - AssetView: Open Ports Management & RTI (v1.0)

Dashboard Toolbox - AssetView: EOL/Obsolete Software & RTI MGMT (v1.0)

Dashboard Toolbox - AssetView: Windows Authentication Management (v1.2)

 

Back to Dashboarding and Reporting

 

* * * WARNING: Read Before Downloading * * *

At this time, Dashboard and Widget JSON files are not interchangeable between application dashboards, meaning AssetView JSON files may only be used in AssetView and Vulnerability Management JSON

files may only be used in Vulnerability Management. If you make a mistake and import a JSON file from one application into the other, you must contact Qualys Support to have the error corrected in the database for your subscription. 

Again, there is no way to reverse this mistake within the UI, it must be done in the database.

1 person found this helpful

Outcomes