Qualys Host Detection Integration

[SHA3]

Hi,

We are trying to integrate ServiceNow with Qualys.

"Qualys Host Detection Integration" when executed uses the below command,

"https://qualysapi.<qualys>.eu/api/2.0/fo/asset/host/vm/detection/?output_format=XML&detection_updated_since=2018-07-18T17:36:33Z&show_tags=1&action=list&vm_scan_since=2018-07-18T17:36:33Z&truncation_limit=500&status=New,Fixed,Active,Re-Opened"

It is only return a response as below,

This XML file does not appear to have any style information associated with it. The document tree is shown below.

<HOST_LIST_VM_DETECTION_OUTPUT>

<RESPONSE>

<DATETIME>2018-07-19T17:37:33Z</DATETIME>

</RESPONSE>

</HOST_LIST_VM_DETECTION_OUTPUT>

<!--

CONFIDENTIAL AND PROPRIETARY INFORMATION. Qualys provides the QualysGuard Service "As Is," without any warranty of any kind. Qualys makes no warranty that the information contained in this report is complete or error-free. Copyright 2018, Qualys, Inc. //

-->

The User used for this API call has full access to Host Detection and Knowledge Base.

Knowledge Base is working as expected. 

Has someone already faced such issue? 

We have raised issue with Qualys support as well, they are saying via curl command the response is fine.

When I try the same curl command, i still get the above response

If anyone could provider a pointer to move forward it will be very helpful.

We are sitting on this for quite a while 😞

[Sangeetha6]

Hi @Eliz Skogquist 

in my case - it is not unmatched CI - it is already available in cmdb ci table.

It is Matched discovered item by CI lookup rule.

[SHA3 · Accepted solution]

Sorted. The issue was actually with the permissions that was given to the Qualys user. 

Qualys user id had full access to Knowledge base, but needed more access for Host Detection.

[boey007]

Hi SHA,

Could you let me know what roles/permissions you ended up assigning the integration user as we facing the exact same issue.

Kind Regards

Craig