How to get the Asset Group information from the Qualys Technology Add-on (TA) for Splunk?

[kiran331]

Hi,

Is there a option to get the Asset Group information from the Qualys Technology Add-on (TA) for Splunk? I tried show_ags=1 in the setup page under extra parameters, Its not working.

[prabhasgupte · Accepted solution]

No, currently there is no option available to achieve that.

I pressume you are using host detection data input. Qualys TA uses /api/2.0/fo/asset/host/vm/detection/ API to bring in the detection data. I referred this API User Guide, but I could not find any parameter named show_ags for above mentioned API.
In TA logs you might have got an entry saying show_ags is unsupported parameter. (or something similar).

Also, there is no other parameter available with this API which would pull the AG information. So, that can't be done currently.