Hi all.
We have implemented Vulnerability response for servers and the process as a whole is working great. However, from the reporting perspective, we are looking to get a little than what I think is offered out of box. Leadership would like to see by "application service" how many vulnerabilities each service has. This would allow them to figure out which of our most critical applications have the most vulnerabilities and allow additional filtering.
From what I can tell there are only a couple ways to accomplish this...
1: CMDB Query builder to generate the data on a monthly basis - not ideal as it would be a huge data set.
2: Database view - Not ideal as the data loads every time you view it.
3: Custom field to the VIT: This would let us capture the service(s) related to the VITs CI
Has anyone else had to achieve something similar? if so, how did you achieve it?
Thanks
Josh
