Qualys VM App for Splunk Enterprise
Splunk Cloud
This app is NOT supported by Splunk. Please read about what that means for you here.
Overview
The Qualys VM App for Splunk Enterprise provides a vulnerability dashboard containing summary charts that include the top hosts affected and most prevalent vulnerabilities. The dashboard also includes preconfigured searches and reports. This App is dependent on TA-QualysCloudPlatform. The TA-QualysCloudPlatform pulls and indexes the data, and this App makes use of TA-QualysCloudPlatform indexed data to produce dashboards and reports.
Release Notes
Version 1.0.4
Sept. 17, 2019
*Improvements
- Updated SPL for widget 'Hosts not Scanned in more than 30 days' on VM App Dashboard
Version 1.0.3
Jan. 28, 2019
* Enhancements
- SPL correction for IP Lookup form
- Minor updates to Knowledgebase
Version 1.0.2
May 1, 2018
Version 1.0.1
July 25, 2017
* Improvements
- Default page when you visit app will be the dashboard. Earlier it was Knowledgebase page.
* Fixes
- Missing OS tag in host detection output was causing pie chart to be incorrect. Now app will fill "Unknown" value if OS field is not present in event, thus correcting the pie chart.
Version 1.0.0
April 26, 2016