In Asset View there is a column named "Last Logged-in User" for each asset name but for us this column is empty. What do we need to do in order to get this information to show?
Try doing an authenticated scan of the target. This will probably be the last logged on user of that device.
The scans we are performing are authenticated scans. Still the information does not show. Any other suggestions?
Looking at one of mine I see QID-90925-Microsoft Windows User Last Logon Time to get a list of users.
So I would think it would pull it from this.
Now if you have Cloud Agent installed; you will use the attribute Last User Login on the Asset Summary screen, maybe that is what it needs; the cloud Agent?
You might just open a ticket with Qualys and have them investigate.
Indeed it is QID 90925 that pulls this information. And this is enabled for both VM and CA. So VM scans should be able to fetch this.
QID 90925 reads: WMI services is required for the execution of this query.
Does the user account used for running authenticated scans have permissions to execute WMI queries?
Retrieving data ...