{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":46053,"path":"security-management/vulnerability-response/qualys-installed-with.md","title":"Components installed with the Qualys Vulnerability Integration","bundle":null,"doc_type":null,"release":"australia","body":"\n# Components installed with the Qualys Vulnerability Integration\n\nThe following roles, integration jobs, and tables are installed with the Qualys Vulnerability Integration.\n\n**Note:** The Application Files table lists the components that are installed with this application. For instructions on how to access this table, see [Find components installed with an application](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/find-components.md).\n\n## View filtered lists for components installed with an application\n\nFilter the Applications Files table so that only the roles, scheduled jobs, and tables that are installed with an application are displayed. The application you want to view these components for should be installed so that its files are loaded onto the instance and into the metadata table. Follow these steps to view filtered lists from the Applications Files table.\n\n1.  In the filter navigator, enter **sys\\_metadata.list** to navigate to the metadata table.\n2.  Select the condition builder \\(filter icon\\), and select, **Application** &gt; **is** followed by the name of your application. For example, **Application** &gt; **is** &gt; **Vulnerability Response**.\n3.  In the condition builder, to add a second filter, select **AND**, then select, **Class** &gt; **is a** and choose one of the following classes from the list: **Role**, **Scheduled job**, or **Table**.\n4.  Select **Run**.\n\nThe results for the class you selected are displayed in a filtered list.\n\n## Roles installed\n\n<table id=\"table_smw_gty_dvb\"><thead><tr><th>\n\nRole title \\[name\\]\n\n</th><th>\n\nDescription\n\n</th><th>\n\nContains roles\n\n</th></tr></thead><tbody><tr><td>\n\nsn\\_vul\\_qualys.read\n\n</td><td>\n\nHas read access to the Qualys Vulnerability Integration records.\n\n</td><td>\n\n \n\n</td></tr><tr><td>\n\nsn\\_vul\\_qualys.user\n\n</td><td>\n\nUser for Qualys Vulnerability Integration. Can read and write records\n\n</td><td>\n\nsn\\_vul\\_qualys.read\n\n</td></tr><tr><td>\n\nsn\\_vul\\_qualys.admin\n\n</td><td>\n\nAdministrator forQualys Vulnerability Integration. For example, you can modify integration start dates and perform some advanced configuration settings.\n\n</td><td>\n\n-   sn\\_vul\\_qualys.user\n-   sn\\_vul.vulnerability\\_analyst\n\n</td></tr><tr><td>\n\nsn\\_vul.configure\\_qualys\\_integration\n\n</td><td>\n\nCan configure the Qualys Vulnerability Integration\n\n</td><td>\n\nsn\\_vul\\_qualys.admin\n\n</td></tr></tbody>\n</table>## Integration jobs installed\n\n<table id=\"table_xqx_lty_dvb\"><thead><tr><th>\n\nIntegration job\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nQualys Static Search List Integration\n\n</td><td>\n\nSynchronizes Qualys search lists for finding vulnerable entries. Retrieves only static list type records.\n\n</td></tr><tr><td>\n\nQualys Comprehensive Host Detection Integration\n\n</td><td>\n\nRetrieves host and vulnerability data from Qualys and processes it in your instance.\n\n It coordinates the REST message calls to the Host Detection API.\n\n The output of this integration is vulnerable items. This integration imports all the states of the vulnerability: New,Fixed, Active, and Reopened. By default, this integration is inactive and runs weekly.\n\n **Note:** After this integration is activated, the daily comprehensive job imports only the New, Fixed, and Reopened states.\n\n</td></tr><tr><td>\n\nQualys Host List Integration\n\n</td><td>\n\nRetrieves authenticated and unauthenticated host scan data and host tags from Qualys once a week and stores it in the Discovered Items module in your instance. Helps identify assets that haven't been scanned recently.\n\n</td></tr><tr><td>\n\nQualys Host Detection Integration\n\n</td><td>\n\nRetrieves host and vulnerability data from Qualys and processes it in your instance. It coordinates the REST message calls to the Host List Detection API.The outputs of this integration are vulnerable items.\n\n Qualys host tags are imported in this integration.\n\n</td></tr><tr><td>\n\nQualys Ticket Integration\n\n</td><td>\n\nRetrieves Qualys tickets and adds them to your instance. It coordinates the REST message calls to the ticket list API.There are often fewer tickets than Host Detections since Qualys settings can constrain the detections that result in a ticket.\n\n</td></tr><tr><td>\n\nQualys Option Profile List Integration\n\n</td><td>\n\nRetrieves option profiles from the Qualys product. Option profiles include scan settings which are required when you initiate scans from your ServiceNow AI Platform instance.\n\n</td></tr><tr><td>\n\nQualys Appliance List Integration\n\n</td><td>\n\nRetrieves scanner appliance information from Qualys.\n\n</td></tr><tr><td>\n\nQualys Asset Group Integration\n\n</td><td>\n\nRetrieves asset group information from Qualys. Asset groups are used to identify which scanner appliances to use for scanning matching configuration items.\n\n</td></tr><tr><td>\n\nQualys Knowledge Base \\(Backfill\\)\n\n</td><td>\n\nRetrieves Qualys knowledge base entries.Scheduled to run after the Qualys Knowledge Base Integration. Updates your instance with any QIDs that were referenced in the Qualys Knowledge Base or Qualys Host Detection integration but did not exist in the system.\n\n</td></tr><tr><td>\n\nQualys Knowledge Base\n\n</td><td>\n\nRetrieves Qualys knowledge base entries. The retrieved data is based on the date the vulnerabilities were updated by Qualys and since the last time the integration ran.This data is useful for populating historical data into your instance as well as ensuring the Qualys Identifiers \\(QIDs\\) are up to date.\n\n</td></tr><tr><td>\n\nQualys Dynamic Search List Integration\n\n</td><td>\n\nSynchronizes Qualys search lists for finding vulnerable entries, and retrieves dynamic list type records.\n\n</td></tr><tr><td>\n\nFixing the detections for updated key for Qualys\n\n</td><td>\n\nA hashed combination of fields that provided a way to identify and tie a detection to a Qualys vulnerable item.\n\n</td></tr><tr><td>\n\nQualys Update existing discovered items with network partition identifier\n\n</td><td>\n\nUpdates your existing discovered items. CIs for your existing Qualys Vulnerability Integration data are created or updated to include the network partition identifier granularity.\n\n</td></tr></tbody>\n</table>## Tables installed\n\n<table id=\"table_vxk_4ty_dvb\"><thead><tr><th>\n\nTable\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nSearch List Vulnerabilitysn\\_vul\\_qualys\\_m2m\\_search\\_list\\_vul\n\n</td><td>\n\nStores the mapping between the Qualys search list and a vulnerability.\n\n</td></tr><tr><td>\n\nQualys Vulnerability Scannersn\\_vul\\_qualys\\_scanner\n\n</td><td>\n\nTable that extends Vulnerability Scanners to store scanner information for the Qualys rescan feature.\n\n</td></tr><tr><td>\n\nQualys Search Listssn\\_vul\\_qualys\\_search\\_list\n\n</td><td>\n\nStores search lists retrieved by the Qualys search list integration.\n\n</td></tr><tr><td>\n\nQualys Appliance Importsn\\_vul\\_qualys\\_appliance\\_imp\n\n</td><td>\n\nTable extending the import set row. Field map transformation is skipped and the response attachment is processed directly with the onComplete script.\n\n</td></tr><tr><td>\n\nQualys CIsn\\_vul\\_qualys\\_ci\n\n</td><td>\n\nTable no longer used.\n\n</td></tr><tr><td>\n\nHost Detection Paginationsn\\_vul\\_qualys\\_host\\_detection\\_pagination\n\n</td><td>\n\nTable no longer used.\n\n</td></tr><tr><td>\n\nQualys Integration Runsn\\_vul\\_qualys\\_integration\\_run\n\n</td><td>\n\nTable no longer used.\n\n</td></tr><tr><td>\n\nQualys Integrationsn\\_vul\\_qualys\\_integration\n\n</td><td>\n\nTable extending the vulnerability integration and stores all the integrations that correspond to Qualys.\n\n</td></tr><tr><td>\n\nQualys Static Search List Importsn\\_vul\\_qualys\\_static\\_search\\_list\\_imp\n\n</td><td>\n\nTable extending the import set row. Field maps are used to transform data to the target table, Qualys Search Lists.\n\n</td></tr><tr><td>\n\nQualys Knowledge Basesn\\_vul\\_qualys\\_knowledge\\_base\n\n</td><td>\n\nTable extending the import set row. Field map transformation is skipped and the response attachment is processed directly with the onComplete script.\n\n</td></tr><tr><td>\n\nQualys Ticket Listsn\\_vul\\_qualys\\_ticket\\_list\\_imp\n\n</td><td>\n\nTable extending the import set row. Field map transformation is skipped and the response attachment is processed directly with the onComplete script.\n\n</td></tr><tr><td>\n\nQualys Option Profilesn\\_vul\\_qualys\\_option\\_profile\n\n</td><td>\n\nTable storing the option profiles retrived from Qualys. This table used with the rescan.\n\n</td></tr><tr><td>\n\nQualys Dynamic Search List Importsn\\_vul\\_qualys\\_dynamic\\_search\\_list\\_imp\n\n</td><td>\n\nTable extending the import set row. Field maps are used to transform data to the target table, Qualys Search Lists.\n\n</td></tr><tr><td>\n\nQualys Import Set Re-Runsn\\_vul\\_qualys\\_import\\_rerun\n\n</td><td>\n\nTable no longer used.\n\n</td></tr><tr><td>\n\nQualys Option Profile Importsn\\_vul\\_qualys\\_option\\_profile\\_import\n\n</td><td>\n\nTable extending the import set row. Field map transformation is skipped and the response attachment is processed directly with the onComplete script.\n\n</td></tr></tbody>\n</table>"}}