AnsweredAssumed Answered

How to filter out QID's with the "Ignored" status in a widget

Question asked by Rusty Qualyz on Mar 13, 2019
Latest reply on Apr 5, 2019 by charles robbins

Hello,

 

I am working on the beta VM dashboard.  I am setting up a dashboard for our Win Server team and would like to know how I can filter out the vulnerabilities that have an "Ignored" status.

 

The Widget is the stock widget "Vulnerabilities By Severity" and here are the Queries:

 

Vulnerability:
(vulnerabilities.typeDetected:Confirmed and vulnerabilities.vulnerability.severity:[2,3,4,5]) and vulnerabilities.vulnerability.severity:"2"

 

Asset:
tags.name:`Windows Servers Agent`

 

I get all of the the Confirmed Sev 2 vulnerabilities, even the "Ignored" ones.  I am looking for a way to exclude them from the widget.  Is there a Status:Ignored or Status:Closed/Ignored?

 

This same behavior shows up on the Top 10 Vulnerabilities widget as well.

Outcomes