Source Types for Searching Your Apps Data

This page describes the available source types to search and analyze application data collected from the Qualys platform in Splunk.

Source types help categorize raw ingested data into meaningful datasets for efficient search and reporting.

Here is the list of default source types for Qualys apps. You can use these source types when searching your app data in Splunk.

 If you have used a custom index, replace {INDEX_NAME} with the custom index name; otherwise, replace it with main.

Source Types for VMDR Scan

• Source Type Name -qualys_vmdr_scan_list

  Search Query - index={INDEX_NAME} sourcetype="qualys:vmdr:scan_list"

• Source Type Name - qualys_vmdr_scan_summary

  Search Query - index={INDEX_NAME} sourcetype="qualys:vmdr:scan_summary" 

• Source Type Name - qualys:vmdr:scan_host_results

  Search Query - index={INDEX_NAME} sourcetype="qualys:vmdr:scan_host_results" 

• Source Type Name -qualys:vmdr:scan_report

  Search Query - index={INDEX_NAME} sourcetype="qualys:vmdr:scan_report" 

Source Types for WAS Scan Data

• Source Type Name - qualys_was_scan_report

  Search Query - index={INDEX_NAME} sourcetype="qualys:was:scan_report"

• Source Type Name - qualys_was_scan

  Search Query - index={INDEX_NAME} sourcetype="qualys:was:scan"