Troubleshooting

The following are the commonly faced issues and their troubleshooting solutions:

Messages are not delivered to Microsoft Teams

When creating an alert triggering rule on the Policy Audit, using double quotes ("") for field values in QQL (for example, vulnerabilities.vulnerability.vendors.productName:"windows"), alert messages are not delivered to Microsoft Teams.

Solution:
To successfully trigger the alerting action from the Qualys platform, you need to replace "@{items('Apply_to_each_2')['text']}" with the replace(items('Apply_to_each_2')['text'],'"','\"') from the Expression in the Teams Workflow.

Perform the following steps to replace the expression:

1. Select the text to replace the expression. 
   
   
2. Click the (cross) beside the text.
3. Click Expression from the Add Dynamic Content.
   
   
4. Paste replace(items('Apply_to_each_2')['text'],'"','\"') in the expression field and click OK.
   
   
   
   The replaced expression is shown with the 'replaced' label.
   
   
5. Click Save.