I am creating templates for patch reporting. In the scan results selection section I can see that the results can be restricted by Asset Groups, IPs/Ranges, and Asset Tags. There is nothing preventing me from using these in combination.
If I select Asset Group "Site A" and Asset Tag "Linux Servers", I would intuitively expect that Qualys would apply a logical AND operation. But I am seeing hosts in the report that are not Linux servers, which indicates that something counterintuitive is happening.
Is this approach of selecting by both Asset Group and Tag supported, and if so, am I overlooking something?
I've run into this same thought - I would love to run reports against All asset groups and filter by tag instead of having to create asset groups from tags. Herbon, did you ever figure out how to do this?