Filter for Delta Report (Discovery scan)

Archive Greenbone Community Edition
1

I am running a Discovery scan under GVM 21, and I am trying to get a PDF report about the changes since the last scan. Where do I set what gets included in that report?

To get the report, I have set up an alert as follows:

|Condition|Always|
|Event|Task run status changed to Done|
|Delta Report|Previous completed report of the same task|

When creating the alert, I see no way to put a filter on what will be reported. Specifically, I am trying to exclude all unchanged results. What I am getting is 600+ pages of mostly unchanged items, which apparently is less than half of what the scan actually got.

I have created a filter that I believe reflects what I want:
apply_overrides=0 levels=hmlg rows=5000 min_qod=70 first=1 sort=name delta_states=ngc result_hosts_only=1
I see, however, no way to apply it to the scan, or to the alert. What am I missing?

Thanks,
–Juergen

GVM versions

gsad: 21.4.1~dev1
gvmd: 21.4.2
openvas-scanner: 21.4.1
gvm-libs: 21.4.1

Environment

Operating system: Debian
Kernel: Linux gvm 4.19.0-17-amd64 #1 SMP Debian 4.19.194-2 (2021-06-21) x86_64 x86_64 x86_64 GNU/Linux
Installation method / source: Docker container from https://github.com/isaudits/docker-gvm

2

Hi @juergen :grinning:

I’m looking into your question (but if anyone has an answer in the meantime, please feel free to jump in, thanks!)

1 Like
3

A colleague advised that the solution may be to compose the report content when creating an alert and pointed me to https://docs.greenbone.net/GSM-Manual/gos-21.04/en/scanning.html#creating-an-alert
Scroll down a bit to “Report Content (only for task related alerts)”
If you click on the icon, you should be able choose a filter for the report. Let us know if that helps, thank you :grinning:

2 Likes
4

Thank you very much!

2 Likes