Qualys VMDR integration, add Qualys Tags in documents

Elastic Stack Elastic Agent
1

Hello everybody,
we are an MSP providing security services for our customers.

The customers in our Qualys environment are divided by different tags inside of Qualys, like cust:CUST1, cust:CUST2...

For now we use a self-written script to get that data from Qualys into Elasticsearch. The script checks for the qualys tag and uses that to send it to the correct customer ELK-cluster.

We've now tried to mimic this behavior with the Qualys VMDR integration. The integration itself is working fine and getting all data from the Qualys API.

However, there is no field showing the attached qualys tags in the asset data documents.

Is there any way to make the integration grab those as well?

2

Hi Juma,

The elastic agent Qualys VMDR integration is already compatible with Qualys tags. You need to specify them in the "Input Parameters" of the integration.

You must specify show_tags=1. It's set to 0 by default. You can have access to the details in the Qualys API documentation.