use web_application_name as asset

This commit is contained in:
pemontto
2019-05-01 20:50:41 +01:00
parent e2c2b47d4d
commit 98a84af5d0
2 changed files with 2 additions and 8 deletions

View File

@ -33,12 +33,6 @@ filter {
remove_field => ["scan_time"] remove_field => ["scan_time"]
} }
if "qualys_web" in [tags] {
mutate {
add_field => { "asset" => "%{web_application_name}" }
}
}
mutate { mutate {
convert => { "cvss" => "float"} convert => { "cvss" => "float"}
convert => { "cvss_base" => "float"} convert => { "cvss_base" => "float"}

View File

@ -527,8 +527,8 @@ class qualysScanReport:
df['dns'] = df['url'].str.extract('https?://([^/]+)', expand=False) df['dns'] = df['url'].str.extract('https?://([^/]+)', expand=False)
df.loc[df['uri'] != '','dns'] = df.loc[df['uri'] != '','uri'].str.extract('https?://([^/]+)', expand=False) df.loc[df['uri'] != '','dns'] = df.loc[df['uri'] != '','uri'].str.extract('https?://([^/]+)', expand=False)
# Set asset to dns # Set asset to web_application_name
df['asset'] = df['dns'] df['asset'] = df['web_application_name']
df.fillna('', inplace=True) df.fillna('', inplace=True)
return df return df