Is there a way to generate a report that only shows just the vulnerability details and not the host's information? So it would only show the vulnerability threat, impact, solution, and compliance?
Could you give an example of the output you are looking for?
Say you have your desired report for 1000 hosts without an unique host detail section. What do you wish to do?
I would like the report to only have the information for the vulnerabilities that were found. It would list the vulnerability name, the threat section, impact section, solution section and compliance section, and that’s all.
As of now, when I run a report, it lists all those along with the IP's, along with the information about that IP, that the vulnerability was found on.
Ideally I would like to only have that first section for each vulnerability in a PDF report and then I would have a different CSV report listing the IPs for the vulnerability.
Hope that makes sense.
I just want to make sure I understand what your end goal is.
Is it to show all of the vulnerabilities that reside in your network without showing the IP addresses associated with the vulnerability?
If that is the case, I don't think you can do this with qualys reports. You could group by Vulnerability instead of group by host, and then it will list out all the vulnerabilities in your network and then under the vulnerbility then list the IPs.
Yea, that is my end goal, to have a report showing just the vulnerabilities that are in my network. I have my reports set up now where I have it grouped by vulnerability. I'll try Eric's suggestion to use the API to pull down the XML and strip out the IP info.
From what I have seen, your best option is to create a report template by vulnerability, then use the API to pull down the XML and strip out the IP information. Then just convert that to PDF.
Retrieving data ...