Input Logs

While running, host detection input sends its log to QRadar over Syslog. You can use the following AQL in Log Activity > Advance Search to see them. Follow the same steps mentioned with the AQL below.

Host Detection

SELECT UTF8(payload) as utf8_payload from events where utf8_payload ILIKE '%Qualys:HostDetection%' ORDER BY utf8_payload ASC

Knowledgebase

SELECT UTF8(payload) as utf8_payload from events where utf8_payload ILIKE '%Qualys:Knowledgebase%' ORDER BY utf8_payload ASC