Qualys Tables

Tables

QualysAssetGroups

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
BatchDate	datetime	Batch date of data load
ID	integer	Internal identifier of the asset group
Title	string	Display name/title of the asset group
ApplianceIDs	float	List of scanner appliance IDs associated with this group
AssignedUserIDs	string	List of user IDs assigned to the asset group
BusinessImpact	string	Business impact rating or description of the asset goup
Comments	string	Additional comments or notes for the asset group
DefaultApplianceID	integer	Default scanner appliance ID for the group
DnsList	string	List of DNS names linked to the group
DomainList	string	List of domains associated with the group
HostIDs	string	List of host IDs included in the group
IpSetList	string	Set of IP ranges or addresses tied to the group
LastUpdate	datetime	Last update timestamp for the asset group record
NetBiosList	string	List of NetBIOS names included in the group
NetworkID	integer	Network identifier linked to the asset group
OwnerUserID	integer	User ID of the group’s owner
OwnerUserName	string	Username of the group’s owner

QualysAssetInventories

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
AssetID	integer	Internal Qualys asset identifier
AssetUUID	string	Universally unique identifier for the asset
HostID	integer	Host identifier linked to vulnerability/scan data
LastModifiedDate	datetime	Last modification timestamp of the record
AgentID	string	Identifier of the Qualys Cloud Agent installed on host
CreatedDate	datetime	Record creation date
SensorLastUpdatedDate	datetime	Timestamp when the sensor data was last updated
AssetType	string	Type of asset (e.g., `host`, `container`, `cloud instance`)
Address	string	IP address of the asset
DnsName	string	DNS name of the asset
AssetName	string	Display name of the asset
NetbiosName	string	NetBIOS name of the asset
TimeZone	string	Time zone of the asset/system
BiosDescription	string	BIOS description string
LastBoot	string	Last boot time of the system
TotalMemory	integer	Total memory of the system (in MB)
CpuCount	string	CPU/core count
LastLoggedOnUser	string	Last user logged on
HwUUID	string	Hardware UUID
BiosSerialNumber	string	BIOS serial number
BiosAssetTag	string	BIOS asset tag
IsContainerHost	bit	Indicates if the system is a container host
OperatingSystem	string	Operating system details
Hardware	string	Hardware description string
UserAccountListData	string	List of user accounts on the system
OpenPortListData	string	List of open ports
VolumeListData	string	List of storage volumes
NetworkInterfaceListData	string	List of network interfaces
SoftwareListData	string	List of installed software
Provider	string	Host provider (e.g., `VMware`, `AWS`)
CloudProvider	string	Cloud provider name (e.g., `AWS`, `Azure`, `GCP`)
Agent	string	Agent type used for collection
Sensor	string	Sensor type used for detection
Container	string	Container details if applicable
Inventory	string	Full inventory data
Activity	string	Asset activity logs
TagList	string	Tags applied to the asset
ServiceList	string	List of running services
LastLocation	string	Last known physical/logical location
Criticality	string	Criticality rating
BusinessInformation	string	Business-related metadata
AssignedLocation	string	Assigned location information
BusinessAppListData	string	Business applications associated with asset
RiskScore	integer	Risk score assigned by Qualys
PassiveSensor	string	Passive sensor identifier
Asn	string	Autonomous system number (ASN)
Isp	string	Internet service provider
Domain	string	Domain name
Subdomain	string	Subdomain
BatchDate	datetime	Batch date of data load

QualysAssetTags

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
ID	string	Internal identifier of the asset tag
TotalCount	integer	Total number of assets associated with the tag
CustomerUUID	string	Universally unique identifier of the customer
TagID	string	Internal identifier for the tag
CustomerID	string	Customer identifier assigned by Qualys
Name	string	Name of the asset tag
TagUUID	string	Universally unique identifier for the tag
BackgroundColor	string	Display background color associated with the tag
BatchDate	datetime	Batch date of data load

QualysOTHostAssets

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
AssetID	integer	Internal Qualys asset identifier
AssetUUID	string	Universally unique identifier of the asset
Address	string	IP address of the asset
MacAddress	string	MAC address of the asset
HardwareCategory1	string	Primary hardware category
HardwareCategory2	string	Secondary hardware category
HardwareVendor	string	Hardware vendor/manufacturer
HardwareModel	string	Hardware model
HardwareClass	string	Hardware classification
InventorySensorName	string	Name of the inventory sensor
InventorySource	string	Source of inventory data
InventorySensorID	string	Identifier of the inventory sensor
CreatedDateTime	datetime	Record creation timestamp
LastUpdatedDateTime	datetime	Last update timestamp
PurdueLevel	string	Purdue model level (ICS/OT networks)
TagIDs	string	Tag IDs assigned to the asset
TagNames	string	Tag names assigned to the asset
DiscoveryProtocols	string	Discovery protocols used to find the asset
InterfaceAddresses	string	Interface IP addresses
InterfaceMacAddresses	string	Interface MAC addresses
InterfaceProtocols	string	Protocols associated with interfaces
InterfaceLastSeenDates	string	Last seen timestamps for interfaces
QAssetID	integer	Qualys asset identifier
BatchDate	datetime	Batch date of data load

QualysOTVulnerabilities

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
ID	integer	Primary key identifier for the vulnerability record
Qid	integer	Qualys QID (Qualys vulnerability identifier)
AssetUUID	string	Universally unique identifier of the associated asset
AssetID	integer	Internal Qualys asset identifier
AssetModuleID	integer	Identifier for the Qualys OT module
Title	string	Title or name of the vulnerability
Severity	integer	Severity rating of the vulnerability
LastDetected	datetime	Date and time the vulnerability was last detected
FirstDetected	datetime	Date and time the vulnerability was first detected
Patchable	bit	Indicates whether the vulnerability is patchable
CveIDs	string	List of associated CVE identifiers
Status	string	Current status of the vulnerability
ThreatIntel	string	Threat intelligence details related to the vulnerability
Criticality	string	Criticality rating of the vulnerability
VulnCategory	string	Category of the vulnerability
TypeDetected	string	Type of detection method used
BatchDate	datetime	Batch date of data load

QualysPatchManagedAssets

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
ID	string	Internal identifier of the patch-managed asset
Name	string	Display name of the asset
OperatingSystem	string	Operating system installed on the asset
LastLoggedOnUser	string	Last user account logged into the asset
AssetStatus	string	Current status of the asset (e.g., `active`, `inactive`)
ScanStatus	string	Status of the most recent patch scan
StatusCode	integer	Numeric status code for the asset state
StatusDateTime	bigint	Epoch timestamp of the latest asset status update
ScanDateTime	bigint	Epoch timestamp of the most recent scan
HardwareModel	string	Hardware model of the system
HardwareManufacturer	string	Manufacturer of the system hardware
ListTags	string	Tags assigned to the asset
ListInterfaces	string	Network interfaces associated with the asset
ListInstalledPatches	string	List of patches installed on the asset
MissingPatchID	string	Identifiers of missing patches
Version	string	Software or OS version of the asset
Architecture	string	System architecture (e.g., `x86`, `x64`)
OsIdentifier	string	Internal OS identifier code
Platform	string	Platform type of the asset (e.g., `Windows`, `Linux`, `macOS`)
AgentVersion	string	Version of the Qualys agent installed
ListActivatedModules	string	List of Qualys modules activated on the asset
ListOsNotSupportedForModules	string	List of modules not supported by the OS
MissingCount	integer	Number of missing patches on the asset
InstalledCount	integer	Number of installed patches on the asset
BatchDate	datetime	Batch date of data load

QualysPCScans

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
ID	integer	Primary key identifier for the scan record
Name	string	Name of the policy compliance scan
GenerationDateTime	datetime	Date and time when the scan was generated
CompanyInfoName	string	Name of the company associated with the scan
CompanyInfoAddress	string	Address of the company associated with the scan
CompanyInfoCity	string	City of the company associated with the scan
CompanyInfoState	string	State of the company associated with the scan
CompanyInfoCountry	string	Country of the company associated with the scan
CompanyInfoZipCode	integer	Zip or postal code of the company
UserInfoName	string	Name of the user who initiated the scan
UserInfoUsername	string	Username of the user who initiated the scan
UserInfoRole	string	Role of the user who initiated the scan
ListKeys	string	List of scan keys
ListFQDNS	string	List of fully qualified domain names included in the scan
OptionProfileDefault	integer	Indicates if the default option profile was used
OptionProfileText	string	Name or description of the option profile used
BatchDate	datetime	Batch date of data load

QualysScannedHosts

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
ID	integer	Primary key identifier for the scanned host record
AssetID	integer	Internal Qualys asset identifier
Ip	string	IP address of the scanned host
TrackingMethod	string	Method used to track the host (e.g., `IP`, `DNS`, `NetBIOS`)
Dns	string	DNS name of the scanned host
NetBios	string	NetBIOS name of the scanned host
Os	string	Operating system detected on the host
QgHostID	string	Qualys host identifier (QualysGuard Host ID)
FirstFoundDate	datetime	Date and time the host was first detected
LastBoot	datetime	Date and time of the last boot of the host
SerialNumber	string	Hardware serial number of the host
HardwareUUID	string	Hardware UUID of the host
LastActivity	datetime	Date and time of the last recorded activity
AgentStatus	string	Status of the Qualys agent on the host
CloudAgentRunningOn	string	Cloud provider where the Qualys agent is running
DnsHostName	string	Host name portion of the DNS entry
DnsDomain	string	Domain portion of the DNS entry
DnsFqdn	string	Fully qualified domain name (FQDN) of the host
BatchDate	datetime	Batch date of data load

QualysScanResults

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
ID	int identity	Primary key identifier for the scan result (auto-increment identity)
Ref	string	Reference identifier for the scan
Title	string	Title or name of the scan
LaunchDateTime	datetime	Date and time when the scan was launched
Duration	integer	Duration of the scan in seconds
Status	string	Current status of the scan
Target	string	Target of the scan (e.g., `IPs`, `ranges`, or `asset groups`)
IpList	string	List of scanned IP addresses
HostList	string	List of scanned hosts in detailed format
BatchDate	datetime	Batch date of data load

QualysScheduledScans

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
ID	integer	Primary key identifier for the scheduled scan
Active	bit	Indicates whether the scheduled scan is active
Title	string	Title or name of the scheduled scan
UserLogin	string	User login associated with the scheduled scan
Target	string	Target assets or IP ranges for the scheduled scan
IScannerName	string	Name of the internal scanner appliance
EC2InstanceConnectorUUID	string	UUID of the EC2 instance connector
EC2InstanceEC2EndPoint	string	EC2 endpoint for the instance
EC2InstanceEc2OnlyClassic	integer	Indicates whether the EC2 instance is in classic mode only
CloudDetailsProvider	string	Cloud provider details
CloudDetailsConnectorID	integer	Identifier for the cloud connector
CloudDetailsConnectorUUID	string	UUID for the cloud connector
CloudDetailsConnectorName	string	Name of the cloud connector
CloudDetailsScanType	string	Type of cloud scan to be performed
CloudTargetPlatForm	string	Cloud target platform
CloudTargetRegionUUID	string	UUID of the cloud target region
CloudTargetRegionCode	string	Code of the cloud target region
CloudTargetRegionName	string	Name of the cloud target region
CloudTargetVPScopde	string	VPC scope of the cloud target
AssetTagsIncludeSelector	string	Selector for asset tags to include
AssetTagsSetInclude	string	Set of asset tags to include
AssetTagsExcludeSelector	string	Selector for asset tags to exclude
AssetTagsSetExclude	string	Set of asset tags to exclude
AssetTagsUseIPNTRangeTags	integer	Indicates whether IP/Network Range tags are used
ELBDNS	string	Elastic Load Balancer DNS details
OptionProfileTitle	string	Title of the option profile used for the scan
OptionProfileDefaultFlag	integer	Indicates whether the default option profile was used
ProcessingPriority	string	Priority of processing for the scheduled scan
ScheduleWeeklyFrequencyWeeks	integer	Frequency of the weekly schedule in weeks
ScheduleWeeklyWeekdays	string	Weekdays on which the scan is scheduled
ScheduleStartDateUTC	datetime	Start date and time of the scheduled scan (UTC)
ScheduleStartHour	integer	Hour of the day the scan is scheduled to start
ScheduleStartMinute	integer	Minute of the hour the scan is scheduled to start
ScheduleNextLaunchUTC	datetime	Next launch date and time of the scheduled scan (UTC)
ScheduleTimeZoneCODE	string	Time zone code for the schedule
ScheduleTimeZoneDetails	string	Detailed description of the time zone
ScheduleDSTSelected	integer	Indicates whether daylight saving time (DST) is selected
BatchDate	datetime	Batch date of data load

QualysUnixAuthenticationScans

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
ID	integer	Primary key identifier for the Unix authentication scan
Title	string	Title or name of the authentication scan
Username	string	Username used for authentication
SkipPassword	integer	Indicates whether the password is skipped during authentication
ClearTextPassword	integer	Indicates whether a clear-text password is used
TargetType	string	Type of authentication target (e.g., `host`, `IP range`)
NetworkID	integer	Identifier of the associated network
CreatedDateTime	datetime	Date and time the authentication scan record was created
CreatedBy	string	User who created the authentication scan record
LastModifiedDateTime	datetime	Date and time the record was last modified
IPSet	string	Set of IPs included in the authentication scan
BatchDate	datetime	Batch date of data load

QualysVMDetections

Name	Type	Description
ConfigID	integer	Configuration identifier for this record
ID	integer	Primary key identifier for the VM detection record
UniqueVulnID	integer	Unique identifier for the vulnerability instance
Ip	string	IP address of the host where the detection was found
TrackingMethod	string	Method used to track the host (e.g., `IP`, `DNS`, `NetBIOS`)
Os	string	Operating system of the host
Dns	string	DNS name of the host
DnsDataHostName	string	Host name extracted from DNS data
DnsDataDomain	string	Domain extracted from DNS data
DnsDataFqdn	string	Fully qualified domain name (FQDN) from DNS data
NetBios	string	NetBIOS name of the host
LastScanDateTime	datetime	Date and time of the last scan
LastVmScannedDate	datetime	Date when the host was last scanned for VM
LastVmScannedDuration	integer	Duration of the last VM scan in seconds
QID	integer	Qualys vulnerability identifier (QID)
Type	string	Type of vulnerability or detection
Severity	integer	Severity level of the vulnerability
Port	integer	Port number associated with the vulnerability
Protocol	string	Protocol used (e.g., `TCP`, `UDP`)
Ssl	integer	Indicates whether SSL is enabled (1 = `true`, 0 = `false`)
Results	string	Detection results with details
Status	string	Status of the vulnerability (e.g., `New`, `Active`, `Fixed`, `Ignored`)
FirstFoundDateTime	datetime	Date and time the vulnerability was first detected
LastFoundDateTime	datetime	Date and time the vulnerability was last detected
TimesFound	integer	Number of times the vulnerability was detected
LastTestDateTime	datetime	Date and time of the last test for this detection
LastUpdateDateTime	datetime	Date and time of the last update for this detection
IsIgnored	integer	Indicates whether the detection is ignored (1 = `true`, 0 = `false`)
IsDisabled	integer	Indicates whether the detection is disabled (1 = `true`, 0 = `false`)
LastProcessedDateTime	datetime	Date and time when the detection was last processed
BatchDate	datetime	Batch date of data load

Tables

QualysAssetGroups

QualysAssetInventories

QualysAssetTags

QualysOTHostAssets

QualysOTVulnerabilities

QualysPatchManagedAssets

QualysPCScans

QualysScannedHosts

QualysScanResults

QualysScheduledScans

QualysUnixAuthenticationScans

QualysVMDetections

Learn more...