Skip to content

Commit 4e2a4e6

Browse files
authored
Merge pull request #14681 from Bhagya767/qualysvmkbase
Qualys KB CCF connector - fix incomplete data ingestion
2 parents db6eb33 + e624c61 commit 4e2a4e6

5 files changed

Lines changed: 21 additions & 20 deletions

File tree

Solutions/Qualys VM Knowledgebase/Data Connectors/QualysKB_ccf/QualysKB_PollingConfig.json

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -14,22 +14,22 @@
1414
"apiEndpoint": "[[concat(parameters('apiServerUrl'),'/api/4.0/fo/knowledge_base/vuln/')]",
1515
"httpMethod": "GET",
1616
"rateLimitQPS": 1,
17-
"queryWindowInMin": 10,
17+
"queryWindowInMin": 5,
1818
"queryWindowDelayInMin": 600,
1919
"queryTimeFormat": "yyyy-MM-ddTHH:mm:ssZ",
2020
"retryCount": 3,
21-
"timeoutInSeconds": 30,
21+
"timeoutInSeconds": 120,
2222
"headers": {
2323
"X-Requested-With": "XMLHttpRequest",
2424
"User-Agent": "Scuba"
2525
},
2626
"queryParameters": {
2727
"action": "list",
28-
"published_after": "{_QueryWindowStartTime}",
29-
"published_before": "{_QueryWindowEndTime}",
28+
"last_modified_after": "{_QueryWindowStartTime}",
29+
"last_modified_before": "{_QueryWindowEndTime}",
3030
"details": "All",
3131
"show_disabled_flag": "0",
32-
"show_qid_change_log": "[[concat('0',if(and(not(equals(trim(parameters('isPatchable')[0]), '2')), not(equals(trim(parameters('isPatchable')[0]), ''))), concat('&is_patchable=',parameters('isPatchable')[0]), ''),if(and(not(equals(trim(parameters('discoveryMethod')[0]), 'All')), not(equals(trim(parameters('discoveryMethod')[0]), ''))), concat('&discovery_method=',parameters('discoveryMethod')[0]), ''),if(and(not(equals(trim(parameters('discoveryAuthTypes')), 'discoveryAuthTypes')), not(equals(trim(parameters('discoveryAuthTypes')), ''))), concat('&discovery_auth_types=',parameters('discoveryAuthTypes')), ''))]"
32+
"show_qid_change_log": "0"
3333
}
3434
},
3535
"response": {

Solutions/Qualys VM Knowledgebase/Data/Solution_QualysKBtemplateSpec.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@
1111
"Parsers/QualysKB.yaml"
1212
],
1313
"BasePath": "C:\\GitHub\\Azure-Sentinel\\Solutions\\Qualys VM Knowledgebase",
14-
"Version": "3.1.2",
14+
"Version": "3.1.3",
1515
"Metadata": "SolutionMetadata.json",
1616
"TemplateSpec": true,
1717
"Is1PConnector": false
11.8 KB
Binary file not shown.

Solutions/Qualys VM Knowledgebase/Package/mainTemplate.json

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@
4747
"email": "support@microsoft.com",
4848
"_email": "[variables('email')]",
4949
"_solutionName": "Qualys VM Knowledgebase",
50-
"_solutionVersion": "3.1.2",
50+
"_solutionVersion": "3.1.3",
5151
"solutionId": "azuresentinel.azure-sentinel-solution-qualysvmknowledgebase",
5252
"_solutionId": "[variables('solutionId')]",
5353
"uiConfigId1": "QualysKB",
@@ -60,7 +60,7 @@
6060
"dataConnectorVersion1": "1.0.0",
6161
"_dataConnectorcontentProductId1": "[concat(take(variables('_solutionId'),50),'-','dc','-', uniqueString(concat(variables('_solutionId'),'-','DataConnector','-',variables('_dataConnectorContentId1'),'-', variables('dataConnectorVersion1'))))]",
6262
"workspaceResourceId": "[resourceId('microsoft.OperationalInsights/Workspaces', parameters('workspace'))]",
63-
"dataConnectorCCPVersion": "3.1.2",
63+
"dataConnectorCCPVersion": "3.1.3",
6464
"_dataConnectorContentIdConnectorDefinition2": "QualysKbConnector",
6565
"dataConnectorTemplateNameConnectorDefinition2": "[concat(parameters('workspace'),'-dc-',uniquestring(variables('_dataConnectorContentIdConnectorDefinition2')))]",
6666
"_dataConnectorContentIdConnections2": "QualysKbConnectorConnections",
@@ -86,7 +86,7 @@
8686
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
8787
],
8888
"properties": {
89-
"description": "Qualys VM Knowledgebase data connector with template version 3.1.2",
89+
"description": "Qualys VM Knowledgebase data connector with template version 3.1.3",
9090
"mainTemplate": {
9191
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
9292
"contentVersion": "[variables('dataConnectorVersion1')]",
@@ -1210,22 +1210,22 @@
12101210
"apiEndpoint": "[[concat(parameters('apiServerUrl'),'/api/4.0/fo/knowledge_base/vuln/')]",
12111211
"httpMethod": "GET",
12121212
"rateLimitQPS": 1,
1213-
"queryWindowInMin": 10,
1213+
"queryWindowInMin": 5,
12141214
"queryWindowDelayInMin": 600,
12151215
"queryTimeFormat": "yyyy-MM-ddTHH:mm:ssZ",
12161216
"retryCount": 3,
1217-
"timeoutInSeconds": 30,
1217+
"timeoutInSeconds": 120,
12181218
"headers": {
12191219
"X-Requested-With": "XMLHttpRequest",
12201220
"User-Agent": "Scuba"
12211221
},
12221222
"queryParameters": {
12231223
"action": "list",
1224-
"published_after": "{_QueryWindowStartTime}",
1225-
"published_before": "{_QueryWindowEndTime}",
1224+
"last_modified_after": "{_QueryWindowStartTime}",
1225+
"last_modified_before": "{_QueryWindowEndTime}",
12261226
"details": "All",
12271227
"show_disabled_flag": "0",
1228-
"show_qid_change_log": "[[concat('0',if(and(not(equals(trim(parameters('isPatchable')[0]), '2')), not(equals(trim(parameters('isPatchable')[0]), ''))), concat('&is_patchable=',parameters('isPatchable')[0]), ''),if(and(not(equals(trim(parameters('discoveryMethod')[0]), 'All')), not(equals(trim(parameters('discoveryMethod')[0]), ''))), concat('&discovery_method=',parameters('discoveryMethod')[0]), ''),if(and(not(equals(trim(parameters('discoveryAuthTypes')), 'discoveryAuthTypes')), not(equals(trim(parameters('discoveryAuthTypes')), ''))), concat('&discovery_auth_types=',parameters('discoveryAuthTypes')), ''))]"
1228+
"show_qid_change_log": "0"
12291229
}
12301230
},
12311231
"response": {
@@ -1266,7 +1266,7 @@
12661266
"[extensionResourceId(resourceId('Microsoft.OperationalInsights/workspaces', parameters('workspace')), 'Microsoft.SecurityInsights/contentPackages', variables('_solutionId'))]"
12671267
],
12681268
"properties": {
1269-
"description": "QualysKB Data Parser with template version 3.1.2",
1269+
"description": "QualysKB Data Parser with template version 3.1.3",
12701270
"mainTemplate": {
12711271
"$schema": "https://schema.management.azure.com/schemas/2019-04-01/deploymentTemplate.json#",
12721272
"contentVersion": "[variables('parserObject1').parserVersion1]",
@@ -1394,7 +1394,7 @@
13941394
"apiVersion": "2023-04-01-preview",
13951395
"location": "[parameters('workspace-location')]",
13961396
"properties": {
1397-
"version": "3.1.2",
1397+
"version": "3.1.3",
13981398
"kind": "Solution",
13991399
"contentSchemaVersion": "3.0.0",
14001400
"displayName": "Qualys VM Knowledgebase",
Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,8 @@
11
| **Version** | **Date Modified (DD-MM-YYYY)** | **Change History** |
22
| ----------- | ------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------- |
3-
| 3.1.2 | 29-04-2026 | Moving Connector to GA |
4-
| 3.1.1 | 23-04-2026 | Moved endpoint to target Qualys KB API v4.0 |
5-
| 3.1.0 | 19-03-2026 | Added **Codeless Connector** to solution and updated parser to add fields and clean up typos. |
3+
| 3.1.3 | 17-07-2026 | **CCF connector** - fix incomplete data ingestion. |
4+
| 3.1.2 | 29-04-2026 | Moving Connector to GA. |
5+
| 3.1.1 | 23-04-2026 | Moved endpoint to target Qualys KB API v4.0 |
6+
| 3.1.0 | 19-03-2026 | Added **Codeless Connector** to solution and updated parser to add fields and clean up typos.|
67
| 3.0.1 | 03-05-2024 | Added Deploy to Azure Goverment button for Government portal in **Dataconnector** <br/> Fixed Metadata issue for ParserName and ParentId mismatch |
7-
| 3.0.0 | 12-10-2023 | Manual deployment instructions updated for **Data Connector** |
8+
| 3.0.0 | 12-10-2023 | Manual deployment instructions updated for **Data Connector** |

0 commit comments

Comments
 (0)