Qualys PCRS results job creating Technology records with no name

[Robb McGaw]

Hi All,

Currently doing a configuration compliance implementation using the Qualys PCRS integration jobs. We have an issue with the PCRS Results job importing findings where a new technology record with a valid ID but no name is being created instead of referencing the existing technology record with the same ID. This is only happening for a very small number of records (<0.1%) but the result is we have technology records with no name and duplicate IDs and a handful of test results with bad references to a bad technology record.

• It seems specific to this environment, we haven't had the issue in past implementations and we validated issue is not present in PDI install with a demo Qualys instance connected.
• We have confirmed in the source JSON for these findings a valid Id and name value are being sent by the API for the specific test result and we believe it is hitting the import table with a valid name, we see no records in the import table missing a technology name for this finding/asset or even in general.
• This is a new install of configuration compliance and no changes have been made to the Qualys integration job records, REST parameters, transform maps or script includes for the PCRS integration jobs.
  • Qualys VR is previously configured no changes to those jobs or transforms/scripts either.
• We have opened a support ticket with ServiceNow.

If anyone has any thoughts or ideas please let me know.

Thank you,

Robert