AnsweredAssumed Answered

Dynamic Tagging to Filter by firstFound and Severity

Question asked by Joseph Deleon on Apr 18, 2018
Latest reply on May 24, 2018 by Busby

Hi All, thanks for taking the time to read my question.


Question: How do I create a dynamic tag to filter vulnerability data to show only vulnerabilities that were first found over 90 days from the report/scan date?


Scenario: We have a 90 day remediation cycle so I'd like to create a tag for filtering vulnerabilities that were first discovered over 90 days from the date a report/scan is generated. Further, I'd like to filter those results to only display Severity 4 and 5 vulnerabilities.


Reading the forums here, I modified a recommendation to work in the AssetView:
vulnerabilities: ((vulnerability.severity: 5 or vulnerability.severity:4) AND firstFound < now-90d)


Creating a dynamic tag to accomplish the same result is proving to be far more difficult for me. I've reviewed the self-paced training and a substantial portion of community posts here but could really use some help.