Raw Data

Perform the following steps to see the raw data:

1. Go to Log Activity tab and go to Advance Search field.
2. In the Advance Search field, post the sample AQL below.

   For more AQLs, check the Troubleshooting section in this guide.

   Use the following query to view raw data:

   SELECT "Qualys Host Id", "Operating System", "Last Scan Datetime", "Tracking Method", "Qualys QID", "Qualys Severity", "Detection Type", "Status" from events where LOGSOURCENAME(logsourceid) = 'Qualys' OR LOGSOURCENAME(logsourceid) = 'QualysMultiline'

3. Select the date range for which you want to see the data.
4. Click Search.

Depending on the results, you may want to change the date-time range to widen or shorten your search span. You can also execute your own AQL queries to find more appropriate data. Refer to fields in the Qualys LEEF log source to learn about the Qualys fields.