ServiceNow VR integration with Qualys, error 400

[Slav464]

Hello ServiceNow Community!

I am doing an integration of ServiceNow VR with Qualys, and encountered an issue where KB import works fine, but Host import fails with error 400 (Bad Request).

We've dug through all the logs we could find, but the most descriptive message we could dig up was:

"Caught error while retrieving data, integration process VINTPRCXXXXXXXX Error: Invalid response code 400 received from Qualys
undefined"

We are using the latest versions of both Qualys integration app (12.11.2), and VR app (21.1.2).

Did anyone else encounter this in the past? Would be grateful to get any pointers/suggestions! 🙂

[Martin Dewit]

Have you checked your Outbound HTTP Log to verify the URL the integration is requesting from the Qualys API?

Does the API account have Manager role with API and access to all assets?

I would also try to attempt making the same call (limited to 1 asset for example) with the same creds in a Postman to verify everything is working as expected.

[Slav464]

Thank you for your reply Martin!

>Have you checked your Outbound HTTP Log to verify the URL the integration is requesting from the Qualys API?

Yes, the URL looks correct, though we did notice that Request/Response header/body are empty.

Additionally request length appears as 0, which might explain why Qualys would consider this a bad request 🙂

>Does the API account have Manager role with API and access to all assets?

It should, but we will double-check.

>I would also try to attempt making the same call (limited to 1 asset for example) with the same creds in a Postman to verify everything is working as expected.

Great suggestion, will try out after reading on Qualys API docs a bit more 🙂

[Jainish Jain]

Hi @Slav464 , 

Please can you HTTP log level to All , then you would be able to see the response from qualys.

Try updating the Start Date Time to recent date, sometimes it throws an error when qualys is not able to query huge request.

[william_tran]

Hi Slav464,

Another place that you would should use for troubleshooting is this page on the Docs. I've encountered a few issues with the Qualys integration before (specifically with the KBs and attachment sizes) hopefully adjustment of those will help your issue. 

Source: https://docs.servicenow.com/bundle/washingtondc-security-management/page/product/secops-inte...

Another potential issue can be the Qualys API limits, so make sure that your integrations aren't overlapping. 

Source: https://cdn2.qualys.com/docs/qualys-api-limits.pdf

Hope this information is helpful.

William