Create Vulnerability Details Report

Vulnerability Details report displays the detailed report of the vulnerabilities on your industrial assets based on the vulnerability information (attributes).

To create a vulnerability details report, complete the following steps:

Step 1: Define report basic details.

Step 2: Select the report data source.

Step 3: Configure report content.

Step 4: Schedule report creation.

Step 5: Finalize report creation.

Step 1: Basic Details

To complete the basic details, follow these steps:

  1. Navigate to the Reports tab.
  2. Click Create Report and select a Vulnerability Details from the list.

    screen showing Create Vulnerability details button.

    The Basic Details page is displayed.

  3. Enter the Report Title and Report Description.

    screen showing basic details page.

  4. Click Next to view the Report Source page.

Step 2: Report Source

In the Report Source page, you can define the scope of the assets to be included in the report. You can select assets with asset name, asset tag, source type (Industrial OCA, Passive Sensor, or both), or using a search query.

An 'AND' operation is applied across all selected asset options. This means that when you select multiple source options for assets, the report only includes the assets that meet the selected criteria. For example, if you select an asset name and a source type, only the assets that match both will be included.

To select the report data source, follow these steps:

  1. Click plus icon. on the Include Assets section.

    screen showing report source page.

    The Select Assets window is displayed.

  2. Select the assets you want to include and click Add Assets.

    You can search for assets using the asset token in the search bar. The same tokens used in the Assets tab can be applied here. For more information, refer to Assets Search Tokens.

    screen showing select assets form the list.

  3. To include asset tags, click plus icon. on the Include hosts for the tags section.

    screen showing select report source page.

    The Select Tags window is displayed.

  4. Select tags from the list as required.

    If the required tag is not available, you can click Create New Tag to create a tag. For more information, refer to Creating Asset Tags.

    screen showing select tags from the list screen.

  5. Once tags are selected, click Add Tag.

  6. To specify the assets to be included in the report, select the Any or All option from the list.

    The two options, Any and All, determine how assets are filtered and included in the report based on selected tags.

    screen showing select any or all options.

    • Any: When you select Any, the system includes the asset in the report if it has at least one of the selected tags. This means that even if the asset matches just one tag from your selection, it is still included.
    • All: When you select All, the system includes the asset in the report if it has all the selected tags. This means that the asset must have all the tags you selected to be included.
  7. If you want to exclude assets with the selected tags, click the Exclude tags check box.
  8. Click plus icon. to add tags for exclusion.

    Screen showing exclude tag check box.

  9. On the Select Tags window, select tags from the list as required and click Add Tag.

    If the required tag is not available, you can click Create New Tag to create a tag. For more information, refer to Creating Asset Tags.

  10. To specify the assets to be excluded in the report, select the Any or All option from the list.

    The two options, Any and All, determine how assets are filtered and excluded from the report based on selected tags.

    • Any: When you select Any, the system excludes the asset from the report if it has at least one of the selected tags. This means that even if the asset matches just one tag from your selection, it is still excluded.
    • All: When you select All, the system excludes the asset from the report if it has all the selected tags. This means that the asset must have all the tags you selected to be excluded.
  11. Select a Source Type to include in the report.
  12. Provide a query to include assets in the report based on the Search Query.

  13. Click Next to view the Report Display page.

Step 3: Report Display

To select the information to display in the report, follow these steps:

  1. On the Report Display page, select the CVE or QID to be displayed in the report.
  2. Select the Vulnerability Information you want to display in the report.
    The selected check boxes are displayed as columns in the CSV report.

  3. If you want to send an email notification of the report to the stakeholders when the report is created, follow these steps:
    1. On the Notification Settings section, select the Send Email(Via Qualys) option from the Actions list.
    2. Enter recipients, a subject line, and a message.

      You can enter up to a maximum of 50 email addresses separated by a comma.

    3. Select the Restrict downloads checkbox to limit the number of times the recipient can download the report using the download link sent through the email notification.

      Email notifications are sent after reports are generated with Completed, Failed, or Incomplete statuses.
      Reports are downloaded as CSV files. If the download limit is exceeded, a text file is downloaded with the message: "Maximum download limit reached. Contact Support".

  4. Click Next to view the Report Schedule page.

Step 4: Report Schedule

You can select one of the following options to run the reports:

  • On Demand: The report runs once it is created.
  • Schedule: Set up a recurring schedule to run the report automatically at specified intervals.

To schedule report generation, follow these steps:

  1. On the On Demand tab select the required Timezone and click Next.

  2. If you want to schedule the report to run at specific intervals, follow these steps:
    1. Select the Start Date and Start Time on the Schedule tab to run the report at the specified data and time.
    2. To set the recurring schedule, click the Recurring check box.

    3. Select the relevant options that are displayed depending on the frequency you select from the Repeats list.
      Scheduling Frequency Options
      Daily

      		Select this option to schedule the report to run daily on the selected Start Date and Start Time.

      Specify the End Date and End Time for the recurring schedule to end.
      Weekly

      		Select this option to schedule the report to run every week on the selected day.

      The Start Date and Start Time indicate when the schedule begins.

      Specify the End Date and End Time for the recurring schedule to end.
      Monthly You can schedule Monthly reports to run on a date of the month or a day of the week in a month.

      Monthly > date of the month

      Select this option to schedule the report to run on the selected date every month.
      The Recurrence Date denotes the date of the month the report generates at the specified Start Time.

      The Start Date indicates when the schedule begins.

      Specify the End Date and End Time for the recurring schedule to end.

      Monthly > day of the week

      Select this option to schedule the report to run on a specific day of the week each month.
      Select the occurrence (First, Second, Third, or Fourth) and the day of the week (Sunday, Monday, Tuesday, Wednesday, Thursday, Friday, or Saturday) you want the report to run at the specified Start Time.

      The Start Date indicates when the schedule begins.

      Specify the End Date and End Time for the recurring schedule to end.
    4. Select the required Timezone from the list.
  3. Click Next to view the Review and Confirm page.

Step 5: Review and Confirm

To finalize the report creation, follow these steps:

  1. On the Review and Confirm page, review the details.
  2. If you want to edit any details, click the edit icon. and edit the details.
  3. Review the details and click Finish to create the report.

©2025 Qualys, Inc. All rights reserved. Privacy Policy.