Skip to content

Conversation

@qcorporation
Copy link
Contributor

Proposed commit message

Enable agentless integration for Qualys_VMDR, and make some required updates to ingest pipelines to work with the updated package spec.
Screenshot 2025-03-20 at 3 50 07 PM
Screenshot 2025-03-20 at 3 50 19 PM

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • [ ] I have verified that any added dashboard complies with Kibana's Dashboard good practices

Manual Testing

  1. Using 8.18 ECH on Staging

  2. Setup the integration using:
    username: <username>
    password: <password>
    Asset Host Detection data url: https://qualysguard.qg2.apps.qualys.com/
    Knowledge Base data url: https://qualysguard.qg2.apps.qualys.com/
    User Activity Log url: https://qualysguard.qg2.apps.qualys.com/

  3. Validate that data flowed for the 3 datastreams

  4. Validated that the hidden indexes for agentless were created (3) for the different data streams and are populated with the cursors and periodically get updated throughout the operation of the agent

  5. Validate that the agent logs do not show any errors besides ones for metricset collection failed

@qcorporation qcorporation added enhancement New feature or request Team:Service-Integrations Label for the Observability Service Integrations team Integration:qualys_vmdr Qualys VMDR labels Mar 20, 2025
@qcorporation qcorporation requested a review from a team March 20, 2025 19:58
@qcorporation qcorporation self-assigned this Mar 20, 2025
@elasticmachine
Copy link

💚 Build Succeeded

cc @qcorporation

@qcorporation qcorporation marked this pull request as ready for review March 20, 2025 20:26
@andrewkroh andrewkroh added the Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] label Mar 20, 2025
@elasticmachine
Copy link

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@andrewkroh andrewkroh removed the Team:Service-Integrations Label for the Observability Service Integrations team label Mar 20, 2025
@qcorporation qcorporation merged commit b8c9e94 into main Mar 21, 2025
7 checks passed
@qcorporation qcorporation deleted the 11810-qualys_vmdr branch March 21, 2025 14:08
@elastic-vault-github-plugin-prod

Package qualys_vmdr - 6.4.0 containing this change is available at https://epr.elastic.co/package/qualys_vmdr/6.4.0/

flexitrev pushed a commit that referenced this pull request Mar 25, 2025
* Enabled agentless deployment for Qualys_VMDR
flexitrev pushed a commit that referenced this pull request Mar 28, 2025
* Enabled agentless deployment for Qualys_VMDR
flexitrev pushed a commit that referenced this pull request Mar 28, 2025
* Enabled agentless deployment for Qualys_VMDR
flexitrev pushed a commit that referenced this pull request Mar 28, 2025
* Enabled agentless deployment for Qualys_VMDR
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

enhancement New feature or request Integration:qualys_vmdr Qualys VMDR Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

5 participants