Hi, reviewing scans run over the weekend, i notice 8 scans with status "not processed", which means i cannot report on them accurately as of now.
Would it be normal to expect to have to wait nearly two days for Qualys to catch up with scan data?
The earliest scan i'm waiting for was over a total of 12 class C networks.
Because of the account encryption it's not possible to normalize/process the scan data until a user is logged into the account. At the time the user logs in, the account data is decrypted and any scans that completed since the last time a user was logged in will be processed.
Its important to note that a lot of customer's run their scans over the weekend and everyone logs in first thing monday morning, so there may be a slight delay in the scan processing as the system catches up from the weekends scanning activities.
If you were so inclined you could use the API to trigger a login during the early hours monday morning (after the scan has completed) so that the data will begin processing and "should" be ready by the time the workday starts.
Hello Patric, seems a bit daft to me, but if that's how it's designed then so be it. Will any account login suffice, or a login of specific privileges, e.g. Unit Manager? Thanks, Tony
The scan data is descrypted and processed whenever any user logs in so any type of user would work (scanner, reader, auditor, unit manager, etc).
This is the same reason we do not currently have scheduled reporting. Unless a user is actively logged in, all scan data remains unavailable to us.
Its important to note though that we are working actively on the report scheduling feature, so it should be available later this year.
Thanks Patric, still don't agree with the logic. We trust you with our data, so "all data remains unavailable to us", seems illogical.
Did you know btw, that when you click the "view as PDF" button against any community thread that has a Qualys staff comment, we get huge Qualys logos down the pages?
Hello, can you please answer me this then? I just ran an ad-hoc scan, and in the completion email notification i am offered to view the scan results.
If i switch to the GUI, i can see the "Finished Scan" with "Not processed" alongside, giving me the impression that it's not worth viewing the results just yet.
Which am i to believe? Will the email "Scan Results" link take me to the real scan results, or the results from the previous scan, who's data has been processed?