Skip to content

Conversation

@clement-fouque
Copy link
Contributor

@clement-fouque clement-fouque commented Dec 3, 2025

Proposed commit message

This pull request updates the Qualys Global AssetView integration to version 0.6.1 and primarily addresses a bug related to API field naming conventions. The main focus is on correcting the field names used in API requests to match the expected Qualys API parameters. Additionally, minor formatting improvements are included.

Bugfixes and API compatibility

  • Fixed the Qualys API field names in packages/qualys_gav/data_stream/asset/agent/stream/cel.yml.hbs to use excludeFields and includeFields instead of the incorrect exclude_fields and include_fields, ensuring proper API request formatting.

Documentation and metadata

  • Updated the changelog in packages/qualys_gav/changelog.yml to document the bugfix and link to the related pull request.
  • Bumped the package version to 0.6.1 in packages/qualys_gav/manifest.yml.

Formatting improvements

  • Changed the YAML block indicator in packages/qualys_gav/_dev/deploy/docker/files/config.yml from | to |- for the body field, which affects trailing newline handling.

Checklist

  • I have reviewed tips for building integrations and this pull request is aligned with them.
  • I have verified that all data streams collect metrics or logs.
  • I have added an entry to my package's changelog.yml file.
  • I have verified that Kibana version constraints are current according to guidelines.
  • I have verified that any added dashboard complies with Kibana's Dashboard good practices

Author's Checklist

  • [ ]

How to test this PR locally

Related issues

Screenshots

@clement-fouque clement-fouque added bugfix Pull request that fixes a bug issue Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations] Integration:qualys_gav Qualys Global AssetView labels Dec 3, 2025
@clement-fouque clement-fouque marked this pull request as ready for review December 3, 2025 10:26
@clement-fouque clement-fouque requested a review from a team as a code owner December 3, 2025 10:26
@elasticmachine
Copy link

Pinging @elastic/security-service-integrations (Team:Security-Service Integrations)

@clement-fouque clement-fouque changed the title fix: Bump version to 0.6.1 for Qualys Global AssetView integration fix: Rename exclude_fields and include_fields to match Qualys API expected fields Dec 3, 2025
@andrewkroh andrewkroh added the documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. label Dec 3, 2025
@elastic-vault-github-plugin-prod

🚀 Benchmarks report

To see the full report comment with /test benchmark fullreport

@elasticmachine
Copy link

💚 Build Succeeded

History

@clement-fouque
Copy link
Contributor Author

@elastic/security-service-integrations it's ready for review.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bugfix Pull request that fixes a bug issue documentation Improvements or additions to documentation. Applied to PRs that modify *.md files. Integration:qualys_gav Qualys Global AssetView Team:Security-Service Integrations Security Service Integrations team [elastic/security-service-integrations]

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[qualys_gav]: Add excludeFields and includeFields in the configuration

4 participants