--- sourceDocument: Australia Security Management sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management Release : - australia ft:locale : - en-US ft:publication_title : - Australia Security Management ft:clusterId : - security bundleId : - security workflow : - Technology --- # REST messages # Qualys REST messages {#ariaid-title1} * Release version: Australia * * Updated March 12, 2026 * * ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 4 minutes to read Summarize ![AI sparkle icon](https://servicenow.com/docs/portal-asset/ai-sparkle-icon) Summarized using AI This content was generated using new OpenAI-powered functionality. Results are provided on an as is basis and are not guaranteed to be accurate or complete. ## Summary of Qualys REST Messages Qualys REST messages facilitate the retrieval of compliance data via the Qualys API. The integration has been updated to API version 5.0 starting with specific releases, enhancing data retrieval capabilities for security operations and unified security exposure management. Show full answer Show less ## Key Features * **Qualys PC Policies REST Message:** Retrieves policy data from Qualys. Key parameters include: * **action:** Required parameter indicating the operation type. * **details:** Optional parameter to modify detail levels of retrieved policies. * **Qualys PC Controls REST Message:** Fetches compliance controls for various control IDs. Uses similar key parameters as the Policies message. * **Qualys PC Policies Detail REST Message:** Provides complete policy details, including technologies. Key parameters include: * **showusercontrols:** Optional parameter to include user-defined controls. * **showappendix:** Optional parameter to display appendix sections. * **Qualys PC Results REST Message:** Retrieves compliance posture records. Important parameters include: * **policyid:** Required for fetching data related to a specific policy. * **showextendedevidence:** Optional to display extended evidence. * **showremediationinfo:** Optional to include remediation details in output. * **Qualys PCRS Policy Host Integration:** Retrieves host data for compliance evaluation. * **Qualys PCRS Test Results Integration:** Sends request parameters to fetch evidence data and compression options. ## Key Outcomes ServiceNow customers can effectively utilize these REST messages to streamline compliance data retrieval, enhance operational efficiency, and ensure comprehensive visibility into their security posture. By understanding and implementing the parameters effectively, users can tailor their requests to meet specific needs, thereby improving the quality and relevance of the data received from Qualys. Qualys REST messages are used to make calls to the Qualys API to fetch the compliance data. The following rest messages are shipped with the base system. ## Qualys PC Policies REST message The Qualys PC Policies REST message retrieves policy data from Qualys. The changes to the REST message method record impact the request made to Qualys to retrieve policy information. Starting with v12.21.0 of Qualys Integration for Security Operations and v30.3.0 of Unified Security Exposure Management, the API version has been updated to version 5.0. {#qualys-rest-messages-cc__table_v2g_x1q_dt__entry__3} | Parameter Name | Value | Description | |-|-|-| | action | list | Indicates the type of operation requested. Required parameter. | | details | All | Indicates the level of detail shown for policies retrieved. It is safe to modify as per your requirement. | [Table 1. Qualys PC Policies REST message parameters] {#qualys-rest-messages-cc__table_v2g_x1q_dt} ## Qualys PC Controls REST message The Qualys PC Controls rest message retrieves compliance controls information for different control IDs from Qualys. {#qualys-rest-messages-cc__table_n3s_b1p_mxb__entry__3} | Parameter Name | Value | Description | |-|-|-| | action | list | Indicates the type of operation requested. Required parameter. | | details | All | Indicates the level of detail shown for controls retrieved. It is safe to modify as per your requirement. | [Table 2. Qualys PC Controls REST message parameters] {#qualys-rest-messages-cc__table_n3s_b1p_mxb} ## Qualys PC Policies Detail REST message The Qualys PC Policies Detail REST message retrieves the complete policy details, such as technologies and sections. Starting with v12.21.0 of Qualys Integration for Security Operations and v30.3.0 of Unified Security Exposure Management, the API version has been updated to version 5.0. {#qualys-rest-messages-cc__table_v2g_x1q_du__entry__3} | Parameter | Value | Description | |-|-|-| | action | list | Indicates the type of operation being requested. Required parameter. | | show_user_controls | Boolean | * Set to 1 to include user-defined controls (UDCs) in the XML output. * When not specified, UDCs are not included. {#qualys-rest-messages-cc__ul_txc_rxc_qxb} This is an optional parameter. It is safe to modify as per your requirement. | | show_appendix | Boolean | (Optional) Set to 1 to show the appendix section in the XML output. When unspecified. | [Table 3. Qualys PC Policies Detail REST message parameters] {#qualys-rest-messages-cc__table_v2g_x1q_du} ## Qualys PC Results REST message The Qualys PC Results rest message retrieves compliance posture records from Qualys. {#qualys-rest-messages-cc__table_v2g_x1q_dv__entry__3} | Source Field | Value | Description | |-|-|-| | action | list | Indicates the type of operation requested. Required parameter. Changes are not recommended. | | show_extended_evidence | Boolean | * Set to 1 to show the extended evidence information in the output. * Set to 0 or when unspecified, the extended evidence information is not shown in the output. {#qualys-rest-messages-cc__ul_sp1_swc_qxb} Note: * You cannot specify `show_extended_evidence=1` in the same request as `hide_evidence=1`. This results in an error. The extended evidence is a part of the evidence data and it's shown only when evidence data is shown. * This parameter is not shipped with the base system. {#qualys-rest-messages-cc__ul_onp_kc4_cyb} | | cause_of_failure | Boolean | If you pass '1', Qualys will return the cause of failure. If you pass '0', Qualys will not return these attributes. Note: This parameter is not shipped with the base system. | | policy_id | | Shows compliance posture information records for a specified policy. A valid policy ID is required. | | details | All | Indicates the level of detail shown for postures retrieved. It is safe to modify as per your requirement. | | show_remediation_info | | (Optional) Set to 1 to show remediation information in the XML or CSV output. By default, the output does not include the remediation information. When not specified, the remediation information is not included in the output. | [Table 4. Qualys PC Results REST message parameters] {#qualys-rest-messages-cc__table_v2g_x1q_dv} ## Qualys PCRS Policy Host Integration REST message The Qualys PCRS Policy Host Integration retrieves host data from Qualys and processes it in your instance. Starting with v12.21.0 of Qualys Integration for Security Operations and v30.3.0 of Unified Security Exposure Management, the API version has been updated to version 5.0. {#qualys-rest-messages-cc__table_v2g_x1q_dw__entry__3} | Parameter Name | Value | Description | |-|-|-| | policyId | ${lastRunDatetime} | Policy IDs for compliance evaluation. | [Table 5. Qualys PCRS Policy Host Integration REST message parameters] {#qualys-rest-messages-cc__table_v2g_x1q_dw} ## Qualys PCRS Test Results Integration {#qualys-rest-messages-cc__section_apb_pgp_mxb} The table shows the request parameters that are sent. Starting with v12.21.0 of Qualys Integration for Security Operations and v30.3.0 of Unified Security Exposure Management, the API version has been updated to version 5.0. {#qualys-rest-messages-cc__table_bpb_pgp_mxb__entry__3} | Parameter Name | Value | Description | |-|-|-| | evidenceRequired | 1 | * The default value is 1, which indicates that evidence data will be retrieved for the host posture. * Set the value to 0 to retrieve the evidence data. Note: Changing the value to 1 increases the time required to fetch posture data. {#qualys-rest-messages-cc__ul_t25_kyc_qxb} | | compressionRequired | 0 | * The default value is 0, which indicates that the output will not be compressed. * Set the value to 1, if you want the data to be compressed. Note: Not compressing the data increases the time required to fetch posture data. {#qualys-rest-messages-cc__ul_b5d_zyc_qxb} | [Table 6. Qualys PCRS Test Results Integration REST message parameters] {#qualys-rest-messages-cc__table_bpb_pgp_mxb} ## Qualys Comprehensive PCRS Policy Host Integration REST message {#qualys-rest-messages-cc__section_ypg_t4w_l3c} The Qualys Comprehensive PCRS Policy Host Integration retrieves host data from Qualys and processes it in your instance. Starting with v12.21.0 of Qualys Integration for Security Operations and v30.3.0 of Unified Security Exposure Management, the API version has been updated to version 5.0. {#qualys-rest-messages-cc__table_s1f_mpw_l3c__entry__3} | | | | |-|-|-| | policyId | ${policyId} | Policy IDs for compliance evaluation. | [Table 7. Qualys Comprehensive PCRS Policy Host Integration REST message parameters] {#qualys-rest-messages-cc__table_s1f_mpw_l3c} ## Qualys Comprehensive PCRS Test Results Integration {#qualys-rest-messages-cc__section_ykq_54w_l3c} The table shows the request parameters that are sent. Starting with v12.21.0 of Qualys Integration for Security Operations and v30.3.0 of Unified Security Exposure Management, the API version has been updated to version 5.0. {#qualys-rest-messages-cc__table_kmd_ppw_l3c__entry__3} | Parameter Name | Value | Description | |-|-|-| | evidenceRequired | 1 | * The default value is 1, which indicates that evidence data will be retrieved for the host posture. * Set the value to 0 to retrieve the evidence data. Note: Changing the value to 1 increases the time required to fetch posture data. {#qualys-rest-messages-cc__ul_kvw_rpw_l3c} | | compressionRequired | 0 | * The default value is 0, which indicates that the output will not be compressed. * Set the value to 1, if you want the data to be compressed. Note: Not compressing the data increases the time required to fetch posture data. {#qualys-rest-messages-cc__ul_lvw_rpw_l3c} | [Table 8. Qualys Comprehensive PCRS Test Results Integration parameters] {#qualys-rest-messages-cc__table_kmd_ppw_l3c}