has anybody used tag_exclude_selector parameter in Qualys integration with ServiceNow

[IceIronDragon]

Hello All,

We have a requirement where in we do not want certain CI record to be created in Configuration Compliance and Vulnerability Response.

We are thinking to make the filteration at API level.

I read and found out that we can use tag_exclude_selector parameter to exclude the CI's with a certain tag attached to them in Qualys.

lets say the tag on Qualys is :  ABC

I want to understand how to write the parameter in the rest message :

[Chris McDevitt]

No but,

Taking a look at the Qualys API,

tag_exclude_selector=any&tag_set_exclude=EC2_Tes t&connector_name=EC2

Page 48 

https://www.qualys.com/docs/qualys-api-vmpc-user-guide.pdf

I would typically mock this up in PostMan, then add it back into SN Rest Message section like your screenshot.

[IceIronDragon]

but how can I include the tag set on the qualys for certain CI's to be excluded . 

I thought using this tag_exclude_selector should do it but what should i put in the value?

for eg : 

all(ABC) or any(ABC) or any{ABC}

[Chris McDevitt]

Try:

tag_exclude_selector=tag_set_exclude=xxxx

Or

tag_exclude_selector=tag_set_exclude={xxx1,xxx2}

Page 74

tag_set_exclude={value} (Optional) Specify a tag set to exclude. Hosts that match these tags will be excluded. You identify the tag set by providing tag name or IDs. Multiple entries are comma separated. 

[cmcclendon]

Using ALL in the tag_set_exclude param is like an AND condition. You can also specify any which is like an OR condition. 

tag_exclude_selector : all

tag_set_exclude : 123456,234567,345678

the numbers correlate to you the id's in you Qualys host tag table.

-Chris