Hi,
Is there a option to get the Asset Group information from the Qualys Technology Add-on (TA) for Splunk? I tried show_ags=1 in the setup page under extra parameters, Its not working.
No, currently there is no option available to achieve that.
I pressume you are using host detection data input. Qualys TA uses /api/2.0/fo/asset/host/vm/detection/ API to bring in the detection data. I referred this API User Guide, but I could not find any parameter named show_ags for above mentioned API.
In TA logs you might have got an entry saying show_ags is unsupported parameter. (or something similar).
Also, there is no other parameter available with this API which would pull the AG information. So, that can't be done currently.
No, currently there is no option available to achieve that.
I pressume you are using host detection data input. Qualys TA uses /api/2.0/fo/asset/host/vm/detection/ API to bring in the detection data. I referred this API User Guide, but I could not find any parameter named show_ags for above mentioned API.
In TA logs you might have got an entry saying show_ags is unsupported parameter. (or something similar).
Also, there is no other parameter available with this API which would pull the AG information. So, that can't be done currently.