Has anybody used tag_set_exclude parameter in Qualys integration with ServiceNow

[ChilankaS]

Hi All,

I have a requirement to exclude particular asset with asset tag name as ABC and id as 123. So, I gave tag_set_exclude as http parameter and tag ID in values. However, it doesn't work. so, by referring the articles I have added tag_exclude_selector also in the HTTP parameter. But it doesn't work. Anyone has any idea about this please help me. It's urgent. 

https://www.servicenow.com/community/secops-forum/has-anybody-used-tag-exclude-selector-parameter-in...

https://www.servicenow.com/docs/r/xanadu/security-management/vulnerability-response/qualys-add-filte...

Host List - This has parameter list.

[Matthew_13]

Hi Buddy,

It looks like this wont work unless the value your passing is a Qualys tag, not the ServiceNow asset tag field.

The tag_set_exclude parameter only works when filtering by Qualys tags and it must be used along with the full tag filter set. Just passing the tag ID aloone wont take effect.

You’ll need to include the following parameters together:

• use_tags=1

• tag_set_by=id or name, depending on what you’re using

• tag_set_exclude=123

• tag_exclude_selector=any

Also, please confirm:

• the ID “123” is a Qualys tag ID (not a ServiceNow sys_id and

• the asset is actually tagged in Qualys with that tag.

If your trying to exclude based on the ServiceNow asset tag value like asset_tag = ABC these parameters wont apply, since the API filtering happens on the Qualys side, not ServiceNow.

@ChilankaS If help you answer, Please mark Solution Accepted and Thumbs Up

[Matthew_13]

@ChilankaS Let me know of solution help you answer my friend.