Integration Name

Qualys Global AssetView [qualys_gav]

Dataset Name

qualys_gav.asset

Integration Version

0.1.0

Agent Version

9.1.0

OS Version and Architecture

elastic-package

User Goal

The API allows to include and exclude fields. I would like to have those configurable in the integration.
API doc: https://docs.qualys.com/en/csam/api/asset_host_data/get_host_details_of_all_assets.htm
Fields values: https://docs.qualys.com/en/csam/api/get_started/introduction_to_gav_csam_api_paradigm.htm#limit_your_results

Some fields are very verbose. Without any filtering, one asset has 25K lines. I believe it slows down the Qualys API request and the ingestion in elastic.

Existing Features

No possibility to directly filter. We can do it through a custom ingest pipeline as a workaround.

What did you see?

All fields are successfully ingested

Anything else?

No response