All Apps and Add-ons

Not able to generate vulnerability data from a specific account ID

shabaka321
New Member

I have a generated a search query as seen below and I can generate qualys vulnerability data from it, however when I try to append a specific AWS account ID to generate EC2 metadata matching the vulnerability data I get no results.

eventtype=qualys_vm_detection_event | fillnull value=- PROTOCOL DNS | dedup 1 HOST_ID, QID, PROTOCOL, STATUS keepempty=true sortby -_time | search STATUS != "FIXED" | stats list(QID) as QID by OS, DNS, HOST_ID, IP, | lookup qualys_kb_lookup QID OUTPUT TITLE SEVERITY | table OS, DNS, HOST_ID, IP, QID, TITLE, SEVERITY

Is there a way to generate the same data but only from a specific aws account_ID on a table format

0 Karma
Get Updates on the Splunk Community!

Data Management Digest – December 2025

Welcome to the December edition of Data Management Digest! As we continue our journey of data innovation, the ...

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...