Related items list and visualizations in a watch topic

On the Watch Topics page of Vulnerability Manager Workspace, you can create watch topics that are categorized into four modules, Host Vulnerabilities, Container Vulnerabilities, Application Vulnerabilities, and Configuration Test Results. The related items tabs in a watch topic differ for each module.

Role required:

• sn_vul.vulnerability_analyst, or sn_vul.vulnerability_admin for host vulnerable items (VITs)
• sn_vul.app_sec_manager for application vulnerable items (AVITs)
• sn_vul_container.vulnerability_analyst or sn_vul_container.vulnerability_admin for container vulnerable items (CVITs)
• sn_vulc.admin for configuration test results (CTRs)

The navigation pane on the Watch Topics page contains the following modules:

• Host Vulnerabilities: Displays the watch topics that include the host vulnerable items.
• Container Vulnerabilities: Displays the watch topics that include the container vulnerable items.
• Application Vulnerabilities: Displays the watch topics that include the application vulnerable items.
• Configuration Test Results: Displays the watch topics that include the configuration items.
• Inactive: Displays the inactive watch topics from all four modules.

The following table shows the related items tabs that are available for different watch topic modules:

Table 1. Watch topic and its related items

Watch topic	Related items tabs
Host Vulnerabilities	Overview, Impacted CIs, Distinct Vulnerabilities, and Vulnerable Items
Container Vulnerabilities	Overview, Impacted CIs, Distinct Vulnerabilities, and Vulnerable Items
Application Vulnerabilities	Overview and Vulnerable Items
Configuration Test Results	Overview, Impacted CIs, Distinct Configuration Tests, and Configuration Test Results

The following table provides a description of the related items tabs and the visualizations in a watch topic.

Table 2. Related items tabs and visualization in a watch topic

Related items tab and visualization	Description
Overview
Active Vulnerable Items over time	Number of active vulnerable items (VIs) over time. You can monitor the trends from this data for the past 30 days. You can also filter the data by using the Asset Category filters.
VIs in Remediation Efforts	Number of active VIs out of the total number of VIs that are already in the active remediation efforts.
Active Remediation Efforts	List of the active remediation efforts.
Impacted CIs
Distinct CIs	Number of configuration items (CIs) (assets) impacted by these vulnerabilities.
VIs per CI class	Number of vulnerable items (VIs) for each Configuration Management Database (CMDB) CI class. Note: This widget appears only for the watch topics in host, application, and container vulnerabilities module.
Configuration Issues per CI class	Number of CIs for each Configuration Management Database (CMDB) CI class. Note: This widget appears only for the watch topics in Configuration Issues module.
Internet facing VIs	Number of active VIs out of the total number of VIs for your assets that are exposed to the internet. Note: This widget appears only for the watch topics in host, application, and container vulnerabilities module.
Internet facing Configuration Issues	Number of active CIs out of the total number of CIs for your assets that are exposed to the internet. Note: This widget appears only for the watch topics in Configuration Issues module.
Distinct Vulnerabilities
VIs with existing exploits	Active VIs with known exploits.
Distinct vulnerabilities	Number of individual, distinct vulnerabilities that are associated with your assets. The distinct vulnerabilities can be filtered based on the issue type.
VIs with PCI vulnerabilities	Number of individual, distinct assets that have active VIs with Payment Card Industry (PCI) vulnerabilities.
Vulnerable Items
Host Vulnerable Items	List of all host vulnerable items. You can filter this list so that only the records that you want to see are displayed. Note: This list appears only for the watch topics in Host Vulnerabilities module.
Application Vulnerable Items	List of all application vulnerable items. You can filter this list so that only the records that you want to see are displayed. Note: This list appears only for the watch topics in Application Vulnerabilities module.
Container Vulnerable Items	List of all container vulnerable items. You can filter this list to display so that only the records that you want to see are displayed. Note: This list appears only for the watch topics in Container Vulnerabilities module.
Overview tab in a watch topic under Configuration Test Results module
Active Configuration Test Results over time	Number of active configuration test results over time. You can monitor the trends from this data for the past 30 days.
Configuration Test Results in Remediation Efforts	Number of active configuration test results out of the total number of records that are already in the active remediation efforts.
Active Remediation Efforts	List of the active remediation efforts.
Distinct Configuration Tests tab in a watch topic under Configuration Test Results module
Configuration Test Results via Test Criticality	Configuration test results that are based on the criticality of the issues.
Distinct Configuration Tests	Number of distinct configuration tests.
Configuration Test Results tab in a watch topic under Configuration Test Results module	List of configuration test results.

You can acquire the latest details of a watch topic by selecting the Refresh button. The latest refresh status and timestamp are displayed under the watch topic name. When you refresh a watch topic, all the details of the watch topic, including the charts and remediation efforts are updated. A watch topic is refreshed automatically when it is created or updated.

Note:

Because you can't refresh an inactive watch topic, the Refresh button is inactive for an inactive watch topic.

Click a data plot on any of the widgets to view additional information about the records.

Version 18.0 Data visualizations in a Watch Topic