Connectors
A connector is an integration tool that fetches findings from any source vendor with the Qualys ETM's data model. The connector facilitates the transfer and transformation of data from external sources, such as Wiz or Tenable, into the ETM using either CSV uploads or API calls. Connectors also support data transformation functions and can be scheduled for automated, regular data retrieval.
A connector is an integration tool that fetches findings from any source vendor with the Qualys ETM's data model.
A connection is an individual instance of a connector, allowing you to run multiple connections using the same connector. For example, you can create three different CSV connections to upload data from three distinct sources.
What are CSV connectors?What are CSV connectors?
CSV connectors are a category of connectors that allow you to upload the data of the supported vendors in CSV (Comma-Separated Values) file format. These connectors offer two primary methods of data integration:
- For supported vendors, Qualys provides pre-configured source data models and transform maps that you can readily use.
- For custom data sources, you can easily create a source data model by uploading a sample file and "training" the connector to map CSV fields correctly.
The CSV data ingestion can be automated to periodically upload new CSV files from a given source, providing flexible and comprehensive data integration options.
What are API connectors?What are API connectors?
API connectors are a category of connectors that establish a direct link between vendor systems and Qualys. These connectors use native vendor APIs to fetch resources and their associated findings through scheduled data retrieval. API connectors enable automated, periodic updates of vulnerability data without manual intervention.
The Integration types describe the different purposes the connector fulfills.
An inventory type connector collects the resource information and passes it to the Asset Inventory to maintain a list of assets with high visibility on their statuses.
A ticketing type connector allows to raise tickets on integrations like ServiceNow or JIRA based on Qualys findings which can assist with prioritization and vulnerability management.
An Ecosystem Risk Score type connector allows to ingest data from supported vendors to calculate risk metric that aligns with your business goals and helps with prioritization as well.
You must have a valid subscription of ETM and the connector must support the vendor format from where you want to collect the findings. If you are configuring a CSV connector, then you must have a CSV file with the necessary findings. And if you are configuring an API connectors, you need authentication credentials and endpoint URLs to allow for successful API calls.
Yes, the connection is activated automatically after creation. Afterwards, you have two ways of executing the connection. Scheduled or On-demand runs.
You can fetch the data based on a defined schedule. Scheduling is the recommended approach for API Connectors to apply automatic, periodic data retrieval from your source. For CSV connectors, you can enable CSV Automation to achieve periodic data retrieval. Now, if you prefer more control and flexibility, you can also run the connection on-demand at any time.
What are the possible states of connectors?What are the possible states of connectors?
The possible states of connectors are Scheduled, Processing, Processed, and Errored. Here's an elaboration on each state:
- Scheduled: This state indicates that the connector is configured and waiting for its scheduled run. The data transfer hasn't started yet, but it's queued to begin at a specified time. This is typically seen with API connectors that are configured to fetch data at regular intervals.
- Processing: When a connector is in this state, it means that data transfer is actively occurring. For a CSV connector, this could mean that the connector is reading and parsing the uploaded file. For an API connector, it would indicate that the connector is currently making API calls to fetch data from the vendor's system and processing the received information.
- Processed: This state signifies that the connector has successfully completed its data transfer operation. All data has been received, parsed, and integrated into Qualys platform without any issues.
- Errored: If a connector encounters any issues during its operation, it will enter the Errored state. This could happen due to various reasons such as authentication failures, data format mismatches, network issues, or any other problems that prevent successful data transfer or processing. When a connector is in this state, you can check the Logs to diagnose the issue and resolve it for succesful data transfer.