use web_application_name as asset
This commit is contained in:
@ -33,12 +33,6 @@ filter {
|
||||
remove_field => ["scan_time"]
|
||||
}
|
||||
|
||||
if "qualys_web" in [tags] {
|
||||
mutate {
|
||||
add_field => { "asset" => "%{web_application_name}" }
|
||||
}
|
||||
}
|
||||
|
||||
mutate {
|
||||
convert => { "cvss" => "float"}
|
||||
convert => { "cvss_base" => "float"}
|
||||
|
@ -527,8 +527,8 @@ class qualysScanReport:
|
||||
df['dns'] = df['url'].str.extract('https?://([^/]+)', expand=False)
|
||||
df.loc[df['uri'] != '','dns'] = df.loc[df['uri'] != '','uri'].str.extract('https?://([^/]+)', expand=False)
|
||||
|
||||
# Set asset to dns
|
||||
df['asset'] = df['dns']
|
||||
# Set asset to web_application_name
|
||||
df['asset'] = df['web_application_name']
|
||||
|
||||
df.fillna('', inplace=True)
|
||||
return df
|
||||
|
Reference in New Issue
Block a user