This is a general question about the behavior of dynamic tagging in AssetView.
We wanted to create a dynamic tag for the presence of a specific QID.
This seems like a pretty straightforward process.
Create New Rule
Rule Engine = Vuln(QID) Exist
Enter Vuln QID
Check box to "Re-evaluate rule on save"
Hours later, the results for these tags are zero hosts.
We know that the QID is applicable to many hosts, which we can confirm with a search using vulnerabilities.vulnerability.qid.
Does it really take several hours to re-evaluate?
Does "Vuln(QID) Exist" only evaluate data from new scans instead of the existing vulnerability set?