use web_application_name as asset
This commit is contained in:
@ -33,12 +33,6 @@ filter {
|
|||||||
remove_field => ["scan_time"]
|
remove_field => ["scan_time"]
|
||||||
}
|
}
|
||||||
|
|
||||||
if "qualys_web" in [tags] {
|
|
||||||
mutate {
|
|
||||||
add_field => { "asset" => "%{web_application_name}" }
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
mutate {
|
mutate {
|
||||||
convert => { "cvss" => "float"}
|
convert => { "cvss" => "float"}
|
||||||
convert => { "cvss_base" => "float"}
|
convert => { "cvss_base" => "float"}
|
||||||
|
@ -527,8 +527,8 @@ class qualysScanReport:
|
|||||||
df['dns'] = df['url'].str.extract('https?://([^/]+)', expand=False)
|
df['dns'] = df['url'].str.extract('https?://([^/]+)', expand=False)
|
||||||
df.loc[df['uri'] != '','dns'] = df.loc[df['uri'] != '','uri'].str.extract('https?://([^/]+)', expand=False)
|
df.loc[df['uri'] != '','dns'] = df.loc[df['uri'] != '','uri'].str.extract('https?://([^/]+)', expand=False)
|
||||||
|
|
||||||
# Set asset to dns
|
# Set asset to web_application_name
|
||||||
df['asset'] = df['dns']
|
df['asset'] = df['web_application_name']
|
||||||
|
|
||||||
df.fillna('', inplace=True)
|
df.fillna('', inplace=True)
|
||||||
return df
|
return df
|
||||||
|
Reference in New Issue
Block a user