Hey Swathi,
Agree - it appears that something is not right here.
Out of curiosity, do you recall if if you ran the 'Qualys Knowledge Base' integration job, before executing the 'Qualys Host Detection Integration'.
The first time you run the 'Qualys Knowledge Base' job - it does take some time to populate the 'Third-Party Entry' table.
I wonder if by chance the 'Qualys Host Detection Job' got executed without the 'Qualys Knowledge Base' job finishing.
- Are you on London?
- Are your Qualys Integration jobs configured with the 'Run as' User set to "VR.System"? You can check by going to Qualys Vulnerability Integration -> Administration -> Primary Integrations ... then personalizing the columns to include "Run as"..
- If you navigate to Qualys Vulnerability Integration -> Administration -> Primary Integrations -> Qualys Knowledge Base -> Scroll down and look at the "Vulnerability Integration Runs" section / tab ... What do you see there? Are there any records that show State = Complete?
- If you navigate to Vulnerability -> Libraries -> Third-Party ... How many QID records are present? Do any of these QID records have a value in Threat or Solution?
- What happens if you execute the 'Qualys Knowledge Base (Backfill)' integration job via Qualys Vulnerability Integration -> Administration -> Primary Integrations -> Qualys Knowledge Base (Backfill) - do you see QID entries being populated with Summary, Threat, Solution, etc? - after this is finished running?
