What is the best way to find out hosts that have never been scanned (and they may or may not be part of an asset group)?
You could do the above or you can perform an Asset Search too with VM-Assets-Asset Search.
Remember that the Asset search can happen on a host if it has been scanned at least once. If a asset has never been scanned then Qualys hasn't yet created an Asset index to track it. You might then like to do an asset search with target set to "All" Asset groups with no "search criteria". This returns a list of assets scanned at least once and then you can compare that with the assets you have under Assets-Host Assets (this is your in-subscription assets).
I'd say do the following:- Go to the AssetView module- Go to Assets- Fill the search bar with 'lastVmScanDate: null' and press search Now you'll get the list and you can export them as well. You can use the same parameters you now used in the search bar, in a dynamic asset tag, so you can generate a report or dashboard from it.
Retrieving data ...