OMP: OpenVAS Management ProtocolVersion: 7.0 The "management" protocol of the Open Vulnerability Assessment System. Contents
1 Summary of Data Types
2 Summary of Elements
3 Summary of Commands
4 RNC Preamble### Preamble
start = command | response
command
= authenticate
| commands
| create_agent
| create_alert
| create_asset
| create_config
| create_credential
| create_filter
| create_group
| create_note
| create_override
| create_permission
| create_port_list
| create_port_range
| create_report
| create_report_format
| create_role
| create_scanner
| create_schedule
| create_tag
| create_target
| create_task
| create_user
| delete_agent
| delete_asset
| delete_config
| delete_alert
| delete_credential
| delete_filter
| delete_group
| delete_note
| delete_override
| delete_report
| delete_permission
| delete_port_list
| delete_port_range
| delete_report_format
| delete_role
| delete_scanner
| delete_schedule
| delete_tag
| delete_target
| delete_task
| delete_user
| describe_auth
| empty_trashcan
| get_agents
| get_configs
| get_aggregates
| get_alerts
| get_assets
| get_credentials
| get_feeds
| get_filters
| get_groups
| get_info
| get_notes
| get_nvts
| get_nvt_families
| get_overrides
| get_permissions
| get_port_lists
| get_preferences
| get_reports
| get_report_formats
| get_results
| get_roles
| get_scanners
| get_schedules
| get_settings
| get_system_reports
| get_tags
| get_targets
| get_tasks
| get_users
| get_version
| help
| modify_agent
| modify_alert
| modify_asset
| modify_auth
| modify_config
| modify_credential
| modify_filter
| modify_group
| modify_note
| modify_override
| modify_permission
| modify_port_list
| modify_report
| modify_report_format
| modify_role
| modify_scanner
| modify_schedule
| modify_setting
| modify_target
| modify_tag
| modify_task
| modify_user
| move_task
| restore
| resume_task
| run_wizard
| start_task
| stop_task
| sync_cert
| sync_feed
| sync_config
| sync_scap
| test_alert
| verify_agent
| verify_report_format
| verify_scanner
response
= authenticate_response
| commands_response
| create_agent_response
| create_alert_response
| create_asset_response
| create_config_response
| create_credential_response
| create_filter_response
| create_group_response
| create_note_response
| create_override_response
| create_permission_response
| create_port_list_response
| create_port_range_response
| create_report_response
| create_report_format_response
| create_role_response
| create_scanner_response
| create_schedule_response
| create_tag_response
| create_target_response
| create_task_response
| create_user_response
| delete_agent_response
| delete_asset_response
| delete_config_response
| delete_alert_response
| delete_credential_response
| delete_filter_response
| delete_group_response
| delete_note_response
| delete_override_response
| delete_report_response
| delete_permission_response
| delete_port_list_response
| delete_port_range_response
| delete_report_format_response
| delete_role_response
| delete_scanner_response
| delete_schedule_response
| delete_tag_response
| delete_target_response
| delete_task_response
| delete_user_response
| describe_auth_response
| empty_trashcan_response
| get_agents_response
| get_configs_response
| get_aggregates_response
| get_alerts_response
| get_assets_response
| get_credentials_response
| get_feeds_response
| get_filters_response
| get_groups_response
| get_info_response
| get_notes_response
| get_nvts_response
| get_nvt_families_response
| get_overrides_response
| get_permissions_response
| get_port_lists_response
| get_preferences_response
| get_reports_response
| get_report_formats_response
| get_results_response
| get_roles_response
| get_scanners_response
| get_schedules_response
| get_settings_response
| get_system_reports_response
| get_tags_response
| get_targets_response
| get_tasks_response
| get_users_response
| get_version_response
| help_response
| modify_agent_response
| modify_alert_response
| modify_asset_response
| modify_auth_response
| modify_config_response
| modify_credential_response
| modify_filter_response
| modify_group_response
| modify_note_response
| modify_override_response
| modify_permission_response
| modify_port_list_response
| modify_report_response
| modify_report_format_response
| modify_role_response
| modify_scanner_response
| modify_schedule_response
| modify_setting_response
| modify_target_response
| modify_tag_response
| modify_task_response
| modify_user_response
| move_task_response
| restore_response
| resume_task_response
| run_wizard_response
| start_task_response
| stop_task_response
| sync_cert_response
| sync_feed_response
| sync_config_response
| sync_scap_response
| test_alert_response
| verify_agent_response
| verify_report_format_response
| verify_scanner_response
5 Data Type Details5.1 Data Type alive_testIn short: An alive test. 5.1.1 RNCalive_test = xsd:token { pattern = "ICMP, TCP Service & ARP Ping|TCP Service & ARP Ping|I↵
CMP & ARP Ping|ICMP & TCP Service Ping|ARP Ping|TCP Service Ping|ICMP Ping|S↵
can Config Default" }
5.2 Data Type base64In short: Base64 encoded data. 5.2.1 RNCbase64 = xsd:base64Binary 5.3 Data Type booleanIn short: A true or false value. Zero is false, anything else is true. As a result, the empty string is considered true. 5.3.1 RNCboolean = text 5.4 Data Type boolean_atoiIn short: A true or false value, after conversion to an integer. Zero is false, anything else is true. The value is first converted to an integer, as by the C `atoi' routine. This means that an empty string is considered false. 5.4.1 RNCboolean_atoi = text 5.5 Data Type ctimeIn short: A date and time, in the C `ctime' format. An example string in this format is "Wed Jun 30 21:49:08 1993\n". 5.5.1 RNCctime = text 5.6 Data Type type_nameIn short: A name of a data type. 5.6.1 RNCtype_name = xsd:Name 5.7 Data Type integerIn short: An integer. 5.7.1 RNCinteger = xsd:integer 5.8 Data Type iso_timeIn short: A date and time, in ISO 8601 format. An example string in this format is "2011-11-08T19:57:06+02:00". 5.8.1 RNCiso_time = text 5.9 Data Type levelsIn short: A string that may include the characters h, m, l, g and d. 5.9.1 RNClevels = xsd:token { pattern = "h?m?l?g?d?" }
5.10 Data Type nameIn short: A name. Typically this is the name of one of the manager resources, like a task or target. 5.10.1 RNCname = xsd:string 5.11 Data Type portIn short: A port. 5.11.1 RNCport = xsd:token { pattern = "[0-9]{1,5}" }
5.12 Data Type user_listIn short: A space separated list of users. 5.12.1 RNCuser_list = text 5.13 Data Type oidIn short: An Object Identifier (OID). 5.13.1 RNCoid = xsd:token { pattern = "[0-9\.]{1,80}" }
5.14 Data Type severityIn short: A severity score. A severity score is a decimal number between 0.0 and 10.0 (inclusive) with one digit after the decimal point or a special negative value (-1.0, -2.0 or -3.0). If a single severity score defines a constraint, e.g. on whether an override applies, for values 0.0 and lower the severity must be equal to match while for > 0.0 the compared value must be greater or equal. 5.14.1 RNCseverity = xsd:token { pattern = "-[1-3](\.0)?|[0-9](\.[0-9])?|10(\.0)?" }
5.15 Data Type sort_orderIn short: A string describing an order for sorting. The string "descending" denotes descending order, anything else means ascending. 5.15.1 RNCsort_order = text 5.16 Data Type statusIn short: The success or failure status of a command. 5.16.1 RNCstatus = xsd:token { pattern = "200|201|202|400|401|403|404|409|500|503" }
5.17 Data Type task_statusIn short: A task run status. 5.17.1 RNCtask_status = xsd:token { pattern = "Delete Requested|Done|New|Requested|Running|Stop Requ↵
ested|Stopped|Internal Error" }
5.18 Data Type task_trendIn short: The trend of results for a task. 5.18.1 RNCtask_trend = xsd:token { pattern = "up|down|more|less|same" }
5.19 Data Type threatIn short: A threat level. Threat levels are a textual classification of severity scores only supported for importing reports from OpenVAS-6 and older. The use of these elements is deprecated as they are otherwise replaced by severity elements, which should be used instead. 5.19.1 RNCthreat = xsd:token { pattern = "High|Medium|Low|Alarm|Log|Debug" }
5.20 Data Type time_unitIn short: A unit of time. 5.20.1 RNCtime_unit = xsd:token { pattern = "second|minute|hour|day|week|month|year|decade" }
5.21 Data Type timezoneIn short: A timezone. The format of a timezone is the same as that of the TZ environment variable on GNU/Linux systems. That is, the same value accepted by the tzset C function. There are three versions of the format. Note the lack of spaces in the examples. "std offset" defines a simple timezone. For example, "FOO+2" defines a timezone FOO which is 2 hours behind UTC. "std offset dst [offset],start[/time],end[/time]" defines a timezone, including daylight savings time. For example, "NZST-12.00:00NZDT-13:00:00,M10.1.0,M3.3.0". ":[filespec]" refers to a predefined timezone. For example, ":Africa/Johannesburg". Note that the colon is optional. Certain acronyms are predefined, such as GB, NZ and CET. 5.21.1 RNCtimezone = text 5.22 Data Type uuidIn short: A Universally Unique Identifier (UUID). 5.22.1 RNCuuid = xsd:token { pattern = "[0-9abcdefABCDEF\-]{1,40}" }
5.23 Data Type uuid_or_emptyIn short: A Universally Unique Identifier (UUID), or the empty string. 5.23.1 RNCuuid_or_empty = xsd:token { pattern = "[0-9abcdefABCDEF\-]{0,40}" }
6 Element Details6.1 Element cIn short: A reference to a command. 6.1.1 Structure6.1.2 RNCc
= element c
{
text
}
6.2 Element eIn short: A reference to an element. 6.2.1 Structure6.2.2 RNCe
= element e
{
text
}
6.3 Element rIn short: A reference to a response. 6.3.1 Structure6.3.2 RNCr
= element r
{
text
}
6.4 Element oIn short: An optional pattern item. 6.4.1 Structure6.4.2 RNCo
= element o
{
( c
| e
| r
| g )
}
6.5 Element gIn short: A group of pattern items. 6.5.1 Structure6.5.2 RNCg
= element g
{
c*
& e*
& r*
& o*
& any*
}
6.6 Element anyIn short: Pattern item indicating "any number of". 6.6.1 Structure6.6.2 RNCany
= element any
{
( c
| e
| r
| g )
}
6.7 Element patternIn short: The pattern element of a command or command descendant. It's actually either a 't' element, or the word "text", or "". 6.7.1 Structure
6.7.2 RNCpattern
= element pattern
{
text
& pattern_attrib*
& c*
& e*
& r*
& o*
& g*
& any*
& pattern_t?
}
pattern_attrib
= element attrib
{
pattern_attrib_name
& pattern_attrib_type
& pattern_attrib_required
& pattern_attrib_filter_keywords*
}
pattern_attrib_name
= element name
{
type_name
}
pattern_attrib_type
= element type
{
type_name
}
pattern_attrib_required
= element required
{
boolean
}
pattern_attrib_filter_keywords
= element filter_keywords
{
filter_keywords
}
pattern_t
= element t
{
type_name
}
6.8 Element command_definitionIn short: Definition of a command in OMP describing HELP command. 6.8.1 Structure
6.8.2 RNCcommand_definition
= element command_definition
{
command_definition_name
& command_definition_summary?
& command_definition_description?
& ( ( command_definition_pattern
& command_definition_response )
| ( command_definition_type
& command_definition_ele* ) )
& command_definition_example*
}
command_definition_name
= element name
{
type_name
}
command_definition_summary
= element summary
{
text
}
command_definition_description
= element description
{
text
& command_definition_description_p*
}
command_definition_description_p
= element p
{
text
}
command_definition_pattern
= element pattern # type pattern
{
text
& pattern_attrib*
& c*
& e*
& r*
& o*
& g*
& any*
& pattern_t?
}
command_definition_response
= element response # type pattern
{
text
& pattern_attrib*
& c*
& e*
& r*
& o*
& g*
& any*
& pattern_t?
}
command_definition_example
= element example
{
command_definition_example_summary?
& command_definition_example_description?
& command_definition_example_request
& command_definition_example_response
}
command_definition_example_summary
= element summary
{
text
}
command_definition_example_description
= element description
{
text
}
command_definition_example_request
= element request
{
text
}
command_definition_example_response
= element response
{
text
}
command_definition_type
= element type
{
text
}
command_definition_ele
= element ele # type command_definition
{
command_definition_name
& command_definition_summary?
& command_definition_description?
& ( ( command_definition_pattern
& command_definition_response )
| ( command_definition_type
& command_definition_ele* ) )
& command_definition_example*
}
6.9 Element filter_keywordsIn short: A group of filter keywords usable in an attribute or element text. 6.9.1 Structure
6.9.2 RNCfilter_keywords
= element filter_keywords
{
filter_keywords_condition?
& filter_keywords_column*
& filter_keywords_option*
}
filter_keywords_condition
= element condition
{
text
}
filter_keywords_column
= element column
{
filter_keywords_column_name
& filter_keywords_column_type
& filter_keywords_column_summary
}
filter_keywords_column_name
= element name
{
name
}
filter_keywords_column_type
= element type
{
type_name
}
filter_keywords_column_summary
= element summary
{
text
}
filter_keywords_option
= element option
{
filter_keywords_option_name
& filter_keywords_option_type
& filter_keywords_option_summary
}
filter_keywords_option_name
= element name
{
name
}
filter_keywords_option_type
= element type
{
type_name
}
filter_keywords_option_summary
= element summary
{
text
}
6.10 Element certificate_infoIn short: Info about a certificate. 6.10.1 Structure
6.10.2 RNCcertificate_info
= element certificate_info
{
certificate_info_time_status
& certificate_info_activation_time
& certificate_info_expiration_time
& certificate_info_issuer
& certificate_info_md5_fingerprint
}
certificate_info_time_status
= element time_status
{
xsd:token { pattern = "expired|inactive|unknown|valid" }
}
certificate_info_activation_time
= element activation_time
{
text
}
certificate_info_expiration_time
= element expiration_time
{
text
}
certificate_info_issuer
= element issuer
{
text
}
certificate_info_md5_fingerprint
= element md5_fingerprint
{
text
}
6.11 Element noteIn short: A note. 6.11.1 Structure
6.11.2 RNCnote
= element note
{
attribute id { uuid }
& note_permissions
& note_owner
& note_nvt
& note_text
& note_creation_time
& note_modification_time
& note_writable
& note_in_use
& note_active
& note_orphan
& note_user_tags
& ( note_hosts
& note_port
& note_severity
& note_threat
& note_task
& note_end_time?
& note_result? )?
}
note_permissions
= element permissions
{
note_permissions_permission*
}
note_permissions_permission
= element permission
{
note_permissions_permission_name
}
note_permissions_permission_name
= element name
{
name
}
note_owner
= element owner
{
note_owner_name
}
note_owner_name
= element name
{
name
}
note_nvt
= element nvt
{
attribute oid { oid }
& note_nvt_name
& note_nvt_type
}
note_nvt_name
= element name
{
name
}
note_nvt_type
= element type
{
text
}
note_creation_time
= element creation_time
{
iso_time
}
note_modification_time
= element modification_time
{
iso_time
}
note_writable
= element writable
{
boolean
}
note_in_use
= element in_use
{
boolean
}
note_active
= element active
{
boolean
}
note_text
= element text
{
text
& attribute excerpt { boolean }
}
note_orphan
= element orphan
{
boolean
}
note_user_tags
= element user_tags
{
note_user_tags_count
& note_user_tags_tag*
}
note_user_tags_count
= element count
{
integer
}
note_user_tags_tag
= element tag
{
attribute id { uuid }
& note_user_tags_tag_name
& note_user_tags_tag_value
& note_user_tags_tag_comment
}
note_user_tags_tag_name
= element name
{
text
}
note_user_tags_tag_value
= element value
{
text
}
note_user_tags_tag_comment
= element comment
{
text
}
note_hosts
= element hosts
{
text
}
note_port
= element port
{
text
}
note_severity
= element severity
{
severity
}
note_threat
= element threat
{
threat
}
note_task
= element task
{
attribute id { uuid }
}
note_active
= element active
{
integer
}
note_end_time
= element end_time
{
text
}
note_result
= element result
{
attribute id { uuid }
& note_result_host
& note_result_port
& note_result_nvt
& note_result_severity
& note_result_threat
& note_result_qod
& note_result_description
}
note_result_host
= element host
{
text
& note_result_host_asset
}
note_result_host_asset
= element asset
{
attribute asset_id { uuid }
}
note_result_port
= element port
{
text
}
note_result_nvt
= element nvt
{
attribute oid { oid }
& note_result_nvt_name
& note_result_nvt_type
& note_result_nvt_cvss_base
& note_result_nvt_cve?
& note_result_nvt_bid?
}
note_result_nvt_name
= element name
{
name
}
note_result_nvt_type
= element type
{
text
}
note_result_nvt_cvss_base
= element cvss_base
{
text
}
note_result_nvt_cve
= element cve
{
text
}
note_result_nvt_bid
= element bid
{
integer
}
note_result_severity
= element severity
{
severity
}
note_result_threat
= element threat
{
threat
}
note_result_qod
= element qod
{
note_result_qod_value
& note_result_qod_type
}
note_result_qod_value
= element value
{
integer
}
note_result_qod_type
= element type
{
text
}
note_result_description
= element description
{
text
}
6.12 Element overrideIn short: An override. 6.12.1 Structure
6.12.2 RNCoverride
= element override
{
attribute id { uuid }
& override_permissions
& override_owner
& override_nvt
& override_creation_time
& override_modification_time
& override_writable
& override_in_use
& override_active
& override_text
& override_threat
& override_severity
& override_new_threat
& override_new_severity
& override_orphan
& override_permissions
& override_user_tags
& ( override_hosts
& override_port
& override_task
& override_end_time?
& override_result? )?
}
override_permissions
= element permissions
{
override_permissions_permission*
}
override_permissions_permission
= element permission
{
override_permissions_permission_name
}
override_permissions_permission_name
= element name
{
name
}
override_owner
= element owner
{
override_owner_name
}
override_owner_name
= element name
{
name
}
override_nvt
= element nvt
{
attribute oid { oid }
& override_nvt_name
& override_nvt_type
}
override_nvt_name
= element name
{
name
}
override_nvt_type
= element type
{
text
}
override_creation_time
= element creation_time
{
iso_time
}
override_modification_time
= element modification_time
{
iso_time
}
override_writable
= element writable
{
boolean
}
override_in_use
= element in_use
{
boolean
}
override_active
= element active
{
boolean
}
override_text
= element text
{
text
& attribute excerpt { boolean }
}
override_threat
= element threat
{
threat
}
override_severity
= element severity
{
severity
}
override_new_threat
= element new_threat
{
threat
}
override_new_severity
= element new_severity
{
severity
}
override_orphan
= element orphan
{
boolean
}
override_user_tags
= element user_tags
{
override_user_tags_count
& override_user_tags_tag*
}
override_user_tags_count
= element count
{
integer
}
override_user_tags_tag
= element tag
{
attribute id { uuid }
& override_user_tags_tag_name
& override_user_tags_tag_value
& override_user_tags_tag_comment
}
override_user_tags_tag_name
= element name
{
text
}
override_user_tags_tag_value
= element value
{
text
}
override_user_tags_tag_comment
= element comment
{
text
}
override_hosts
= element hosts
{
text
}
override_port
= element port
{
text
}
override_task
= element task
{
attribute id { uuid }
}
override_active
= element active
{
integer
}
override_end_time
= element end_time
{
text
}
override_result
= element result
{
attribute id { uuid }
& override_result_host
& override_result_port
& override_result_nvt
& override_result_threat
& override_result_severity
& override_result_qod
& override_result_description
}
override_result_host
= element host
{
text
& override_result_host_asset
}
override_result_host_asset
= element asset
{
attribute asset_id { uuid }
}
override_result_port
= element port
{
text
}
override_result_nvt
= element nvt
{
attribute oid { oid }
& override_result_nvt_name
& override_result_nvt_type
& override_result_nvt_cvss_base
& override_result_nvt_cve?
& override_result_nvt_bid?
}
override_result_nvt_name
= element name
{
name
}
override_result_nvt_type
= element type
{
text
}
override_result_nvt_cvss_base
= element cvss_base
{
text
}
override_result_nvt_cve
= element cve
{
text
}
override_result_nvt_bid
= element bid
{
integer
}
override_result_threat
= element threat
{
threat
}
override_result_severity
= element severity
{
severity
}
override_result_qod
= element qod
{
override_result_qod_value
& override_result_qod_type
}
override_result_qod_value
= element value
{
integer
}
override_result_qod_type
= element type
{
text
}
override_result_description
= element description
{
text
}
6.13 Element resultIn short: A result. 6.13.1 Structure
6.13.2 RNCresult
= element result
{
attribute id { uuid }
& result_name
& result_owner
& result_comment
& result_creation_time
& result_modification_time
& result_user_tags?
& result_report?
& result_task?
& result_host
& result_port
& result_nvt
& result_scan_nvt_version
& result_threat
& result_severity
& result_qod
& result_original_threat?
& result_original_severity?
& result_description
& result_delta?
& result_details
& result_detection
& result_notes?
& result_overrides?
}
result_name
= element name
{
text
}
result_owner
= element owner
{
result_owner_name
}
result_owner_name
= element name
{
name
}
result_comment
= element comment
{
text
}
result_creation_time
= element creation_time
{
iso_time
}
result_modification_time
= element modification_time
{
iso_time
}
result_user_tags
= element user_tags
{
result_user_tags_count
& result_user_tags_tag*
}
result_user_tags_count
= element count
{
integer
}
result_user_tags_tag
= element tag
{
attribute id { uuid }
& result_user_tags_tag_name
& result_user_tags_tag_value
& result_user_tags_tag_comment
}
result_user_tags_tag_name
= element name
{
text
}
result_user_tags_tag_value
= element value
{
text
}
result_user_tags_tag_comment
= element comment
{
text
}
result_report
= element report
{
attribute id { uuid }
}
result_task
= element task
{
attribute id { uuid }
& result_task_name
}
result_task_name
= element name
{
text
}
result_host
= element host
{
text
& result_host_asset
}
result_host_asset
= element asset
{
attribute asset_id { uuid }
}
result_port
= element port
{
text
}
result_nvt
= element nvt
{
attribute oid { oid }
& result_nvt_name
& result_nvt_type
& result_nvt_family
& result_nvt_cvss_base
& result_nvt_cve
& result_nvt_cpe
& result_nvt_bid
& result_nvt_tags
& result_nvt_cert
& result_nvt_xref
}
result_nvt_name
= element name
{
name
}
result_nvt_type
= element type
{
text
}
result_nvt_family
= element family
{
name
}
result_nvt_cvss_base
= element cvss_base
{
integer
}
result_nvt_cve
= element cve
{
text
}
result_nvt_cpe
= element cpe
{
text
}
result_nvt_bid
= element bid
{
text
}
result_nvt_tags
= element tags
{
text
}
result_nvt_cert
= element cert
{
result_nvt_cert_cert_ref*
}
result_nvt_cert_cert_ref
= element cert_ref
{
attribute id { text }?
& attribute type { text }?
}
result_nvt_xref
= element xref
{
text
}
result_scan_nvt_version
= element scan_nvt_version
{
text
}
result_threat
= element threat
{
threat
}
result_severity
= element severity
{
severity
}
result_qod
= element qod
{
result_qod_value
& result_qod_type
}
result_qod_value
= element value
{
integer
}
result_qod_type
= element type
{
text
}
result_original_threat
= element original_threat
{
threat
}
result_original_severity
= element original_severity
{
severity
}
result_description
= element description
{
text
}
result_delta
= element delta
{
text
& result_delta_result?
& result_delta_diff?
& result_delta_notes?
& result_delta_overrides?
}
result_delta_result
= element result # type result
{
attribute id { uuid }
& result_name
& result_owner
& result_comment
& result_creation_time
& result_modification_time
& result_user_tags?
& result_report?
& result_task?
& result_host
& result_port
& result_nvt
& result_scan_nvt_version
& result_threat
& result_severity
& result_qod
& result_original_threat?
& result_original_severity?
& result_description
& result_delta?
& result_details
& result_detection
& result_notes?
& result_overrides?
}
result_delta_diff
= element diff # type text
{
}
result_delta_notes
= element notes
{
result_delta_notes_note*
}
result_delta_notes_note
= element note # type note
{
attribute id { uuid }
& note_permissions
& note_owner
& note_nvt
& note_text
& note_creation_time
& note_modification_time
& note_writable
& note_in_use
& note_active
& note_orphan
& note_user_tags
& ( note_hosts
& note_port
& note_severity
& note_threat
& note_task
& note_end_time?
& note_result? )?
}
result_delta_overrides
= element overrides
{
result_delta_overrides_override*
}
result_delta_overrides_override
= element override # type override
{
attribute id { uuid }
& override_permissions
& override_owner
& override_nvt
& override_creation_time
& override_modification_time
& override_writable
& override_in_use
& override_active
& override_text
& override_threat
& override_severity
& override_new_threat
& override_new_severity
& override_orphan
& override_permissions
& override_user_tags
& ( override_hosts
& override_port
& override_task
& override_end_time?
& override_result? )?
}
result_details
= element details
{
result_details_detail*
}
result_details_detail
= element detail
{
result_details_detail_name
& result_details_detail_value
}
result_details_detail_name
= element name
{
text
}
result_details_detail_value
= element value
{
text
}
result_detection
= element detection
{
result_detection_result
}
result_detection_result
= element result
{
attribute id { uuid }
& result_detection_result_details
}
result_detection_result_details
= element details
{
result_detection_result_details_detail*
}
result_detection_result_details_detail
= element detail
{
result_detection_result_details_detail_name
& result_detection_result_details_detail_value
}
result_detection_result_details_detail_name
= element name
{
text
}
result_detection_result_details_detail_value
= element value
{
text
}
result_notes
= element notes
{
result_notes_note*
}
result_notes_note
= element note # type note
{
attribute id { uuid }
& note_permissions
& note_owner
& note_nvt
& note_text
& note_creation_time
& note_modification_time
& note_writable
& note_in_use
& note_active
& note_orphan
& note_user_tags
& ( note_hosts
& note_port
& note_severity
& note_threat
& note_task
& note_end_time?
& note_result? )?
}
result_overrides
= element overrides
{
result_overrides_override*
}
result_overrides_override
= element override # type override
{
attribute id { uuid }
& override_permissions
& override_owner
& override_nvt
& override_creation_time
& override_modification_time
& override_writable
& override_in_use
& override_active
& override_text
& override_threat
& override_severity
& override_new_threat
& override_new_severity
& override_orphan
& override_permissions
& override_user_tags
& ( override_hosts
& override_port
& override_task
& override_end_time?
& override_result? )?
}
6.14 Element reportIn short: Actually attributes and either base64 or a report. 6.14.1 Structure
6.14.2 RNCreport
= element report
{
text # RNC limitation: base64
& attribute id { uuid }
& attribute format_id { uuid }
& attribute extension { text }
& attribute content_type { text }
& attribute type { xsd:token { pattern = "scan|assets|prognostic" } }?
& report_owner
& report_name
& report_comment
& report_creation_time
& report_modification_time
& report_writable
& report_in_use
& report_task
& report_report_format
& report_report
}
report_owner
= element owner
{
report_owner_name
}
report_owner_name
= element name
{
name
}
report_name
= element name
{
""
}
report_comment
= element comment
{
text
}
report_creation_time
= element creation_time
{
iso_time
}
report_modification_time
= element modification_time
{
iso_time
}
report_in_use
= element in_use
{
boolean
}
report_writable
= element writable
{
boolean
}
report_task
= element task
{
attribute id { uuid }
& report_task_name
}
report_task_name
= element name
{
name
}
report_report_format
= element report_format
{
attribute id { uuid }
& report_report_format_name
}
report_report_format_name
= element name
{
name
}
report_report
= element report
{
attribute id { uuid }
& attribute type { xsd:token { pattern = "scan|assets|prognostic" } }?
& report_report_omp
& report_report_report_format
& report_report_sort
& report_report_filters
& report_report_severity_class
& report_report_delta?
& ( report_report_timezone
& report_report_timezone_abbrev
& report_report_permissions
& report_report_user_tags
& report_report_scan_run_status
& report_report_result_count
& report_report_severity
& report_report_host_count?
& report_report_task
& report_report_scan
& report_report_ports
& report_report_results
& report_report_hosts
& report_report_closed_cves
& report_report_vulns
& report_report_os
& report_report_apps
& report_report_ssl_certs
& report_report_host*
& report_report_timestamp
& report_report_scan_start
& report_report_host_start*
& report_report_host_end*
& report_report_scan_end
& report_report_errors )?
}
report_report_omp
= element omp
{
report_report_omp_version
}
report_report_omp_version
= element version
{
text
}
report_report_report_format
= element report_format
{
report_report_report_format_param
}
report_report_report_format_param
= element param
{
report_report_report_format_param_name
& report_report_report_format_param_value
}
report_report_report_format_param_name
= element name
{
text
}
report_report_report_format_param_value
= element value
{
text
}
report_report_delta
= element delta
{
report_report_delta_report
}
report_report_delta_report
= element report
{
attribute id { uuid }
& report_report_delta_report_scan_run_status
& report_report_delta_report_timestamp
& report_report_delta_report_scan_start
& report_report_delta_report_scan_end
}
report_report_delta_report_scan_run_status
= element scan_run_status
{
task_status
}
report_report_delta_report_timestamp
= element timestamp
{
iso_time
}
report_report_delta_report_scan_start
= element scan_start
{
iso_time
}
report_report_delta_report_scan_end
= element scan_end
{
iso_time
}
report_report_sort
= element sort
{
report_report_sort_field
}
report_report_sort_field
= element field
{
text
& report_report_sort_field_order
}
report_report_sort_field_order
= element order
{
xsd:token { pattern = "ascending|descending" }
}
report_report_filters
= element filters
{
text # RNC limitation: levels
& attribute id { uuid }?
& report_report_filters_term
& report_report_filters_phrase
& report_report_filters_notes
& report_report_filters_overrides
& report_report_filters_apply_overrides
& report_report_filters_result_hosts_only
& report_report_filters_min_qod
& report_report_filters_autofp
& report_report_filters_filter*
& report_report_filters_host?
& report_report_filters_delta?
}
report_report_filters_term
= element term
{
text
}
report_report_filters_phrase
= element phrase
{
text
}
report_report_filters_notes
= element notes
{
xsd:token { pattern = "0|1" }
}
report_report_filters_overrides
= element overrides
{
xsd:token { pattern = "0|1" }
}
report_report_filters_apply_overrides
= element apply_overrides
{
xsd:token { pattern = "0|1" }
}
report_report_filters_result_hosts_only
= element result_hosts_only
{
xsd:token { pattern = "0|1" }
}
report_report_filters_min_qod
= element min_qod
{
text
}
report_report_filters_autofp
= element autofp
{
xsd:token { pattern = "0|1|2" }
}
report_report_filters_filter
= element filter
{
xsd:token { pattern = "High|Medium|Low|Log|Debug" }
}
report_report_filters_host
= element host
{
report_report_filters_host_ip
}
report_report_filters_host_ip
= element ip
{
text
}
report_report_filters_delta
= element delta
{
text
& report_report_filters_delta_changed
& report_report_filters_delta_gone
& report_report_filters_delta_new
& report_report_filters_delta_same
}
report_report_filters_delta_changed
= element changed
{
boolean
}
report_report_filters_delta_gone
= element gone
{
boolean
}
report_report_filters_delta_new
= element new
{
boolean
}
report_report_filters_delta_same
= element same
{
boolean
}
report_report_timezone
= element timezone
{
timezone
}
report_report_timezone_abbrev
= element timezone_abbrev
{
text
}
report_report_permissions
= element permissions
{
report_report_permissions_permission*
}
report_report_permissions_permission
= element permission
{
report_report_permissions_permission_name
}
report_report_permissions_permission_name
= element name
{
name
}
report_report_user_tags
= element user_tags
{
report_report_user_tags_count
& report_report_user_tags_tag*
}
report_report_user_tags_count
= element count
{
integer
}
report_report_user_tags_tag
= element tag
{
attribute id { uuid }
& report_report_user_tags_tag_name
& report_report_user_tags_tag_value
& report_report_user_tags_tag_comment
}
report_report_user_tags_tag_name
= element name
{
text
}
report_report_user_tags_tag_value
= element value
{
text
}
report_report_user_tags_tag_comment
= element comment
{
text
}
report_report_scan_run_status
= element scan_run_status
{
task_status
}
report_report_result_count
= element result_count
{
text
& report_report_result_count_full
& report_report_result_count_filtered
& report_report_result_count_debug
& report_report_result_count_hole
& report_report_result_count_info
& report_report_result_count_log
& report_report_result_count_warning
}
report_report_result_count_full
= element full
{
integer
}
report_report_result_count_filtered
= element filtered
{
integer
}
report_report_result_count_debug
= element debug
{
report_report_result_count_debug_full
& report_report_result_count_debug_filtered
}
report_report_result_count_debug_full
= element full
{
integer
}
report_report_result_count_debug_filtered
= element filtered
{
integer
}
report_report_result_count_hole
= element hole
{
report_report_result_count_hole_full
& report_report_result_count_hole_filtered
}
report_report_result_count_hole_full
= element full
{
integer
}
report_report_result_count_hole_filtered
= element filtered
{
integer
}
report_report_result_count_info
= element info
{
report_report_result_count_info_full
& report_report_result_count_info_filtered
}
report_report_result_count_info_full
= element full
{
integer
}
report_report_result_count_info_filtered
= element filtered
{
integer
}
report_report_result_count_log
= element log
{
report_report_result_count_log_full
& report_report_result_count_log_filtered
}
report_report_result_count_log_full
= element full
{
integer
}
report_report_result_count_log_filtered
= element filtered
{
integer
}
report_report_result_count_warning
= element warning
{
report_report_result_count_warning_full
& report_report_result_count_warning_filtered
}
report_report_result_count_warning_full
= element full
{
integer
}
report_report_result_count_warning_filtered
= element filtered
{
integer
}
report_report_severity
= element severity
{
report_report_severity_full
& report_report_severity_filtered
}
report_report_severity_full
= element full
{
severity
}
report_report_severity_filtered
= element filtered
{
severity
}
report_report_severity_class
= element severity_class
{
report_report_severity_class_name
& report_report_severity_class_full_name
& report_report_severity_class_severity_range*
}
report_report_severity_class_name
= element name
{
ERROR
}
report_report_severity_class_full_name
= element full_name
{
text
}
report_report_severity_class_severity_range
= element severity_range
{
report_report_severity_class_severity_range_name
& report_report_severity_class_severity_range_min
& report_report_severity_class_severity_range_max
}
report_report_severity_class_severity_range_name
= element name
{
name
}
report_report_severity_class_severity_range_min
= element min
{
integer
}
report_report_severity_class_severity_range_max
= element max
{
integer
}
report_report_host_count
= element host_count
{
report_report_host_count_full
& report_report_host_count_filtered
}
report_report_host_count_full
= element full
{
integer
}
report_report_host_count_filtered
= element filtered
{
integer
}
report_report_task
= element task
{
attribute id { uuid }
& report_report_task_name
& report_report_task_comment
& report_report_task_target
& report_report_task_progress
& report_report_task_user_tags
}
report_report_task_name
= element name
{
name
}
report_report_task_comment
= element comment
{
text
}
report_report_task_target
= element target
{
attribute id { uuid }?
& report_report_task_target_trash
}
report_report_task_target_trash
= element trash # type boolean
{
}
report_report_task_progress
= element progress
{
integer
}
report_report_task_user_tags
= element user_tags
{
report_report_task_user_tags_count
& report_report_task_user_tags_tag*
}
report_report_task_user_tags_count
= element count
{
integer
}
report_report_task_user_tags_tag
= element tag
{
attribute id { uuid }
& report_report_task_user_tags_tag_name
& report_report_task_user_tags_tag_value
& report_report_task_user_tags_tag_comment
}
report_report_task_user_tags_tag_name
= element name
{
text
}
report_report_task_user_tags_tag_value
= element value
{
text
}
report_report_task_user_tags_tag_comment
= element comment
{
text
}
report_report_scan
= element scan
{
report_report_scan_task
}
report_report_scan_task
= element task
{
report_report_scan_task_slave
& report_report_scan_task_preferences
}
report_report_scan_task_slave
= element slave
{
attribute id { uuid }
& report_report_scan_task_slave_name
& report_report_scan_task_slave_host
& report_report_scan_task_slave_port
}
report_report_scan_task_slave_name
= element name
{
name
}
report_report_scan_task_slave_host
= element host
{
text
}
report_report_scan_task_slave_port
= element port
{
text
}
report_report_scan_task_preferences
= element preferences
{
report_report_scan_task_preferences_preference*
}
report_report_scan_task_preferences_preference
= element preference
{
report_report_scan_task_preferences_preference_name
& report_report_scan_task_preferences_preference_scanner_name
& report_report_scan_task_preferences_preference_value
}
report_report_scan_task_preferences_preference_name
= element name
{
text
}
report_report_scan_task_preferences_preference_scanner_name
= element scanner_name
{
text
}
report_report_scan_task_preferences_preference_value
= element value
{
text
}
report_report_ports
= element ports
{
attribute start { integer }
& attribute max { integer }
& report_report_ports_port*
}
report_report_ports_port
= element port
{
text
& report_report_ports_port_host
& report_report_ports_port_severity
& report_report_ports_port_threat
}
report_report_ports_port_host
= element host
{
text
}
report_report_ports_port_severity
= element severity
{
severity
}
report_report_ports_port_threat
= element threat
{
threat
}
report_report_results
= element results
{
attribute start { integer }
& attribute max { integer }
& report_report_results_result*
}
report_report_results_result
= element result # type result
{
attribute id { uuid }
& result_name
& result_owner
& result_comment
& result_creation_time
& result_modification_time
& result_user_tags?
& result_report?
& result_task?
& result_host
& result_port
& result_nvt
& result_scan_nvt_version
& result_threat
& result_severity
& result_qod
& result_original_threat?
& result_original_severity?
& result_description
& result_delta?
& result_details
& result_detection
& result_notes?
& result_overrides?
}
report_report_hosts
= element hosts
{
( ( attribute start { integer }
& attribute max { integer } )
| report_report_hosts_count )
}
report_report_hosts_count
= element count
{
}
report_report_closed_cves
= element closed_cves
{
report_report_closed_cves_count
}
report_report_closed_cves_count
= element count
{
}
report_report_vulns
= element vulns
{
report_report_vulns_count
}
report_report_vulns_count
= element count
{
}
report_report_os
= element os
{
report_report_os_count
}
report_report_os_count
= element count
{
}
report_report_apps
= element apps
{
report_report_apps_count
}
report_report_apps_count
= element count
{
}
report_report_ssl_certs
= element ssl_certs
{
report_report_ssl_certs_count
}
report_report_ssl_certs_count
= element count
{
}
report_report_host
= element host
{
report_report_host_ip
& report_report_host_asset
& report_report_host_start
& report_report_host_end
& report_report_host_port_count
& report_report_host_result_count
& report_report_host_detail*
}
report_report_host_ip
= element ip
{
text
}
report_report_host_asset
= element asset
{
attribute asset_id { uuid }
}
report_report_host_start
= element start
{
text
}
report_report_host_end
= element end
{
text
}
report_report_host_port_count
= element port_count
{
report_report_host_port_count_page
}
report_report_host_port_count_page
= element page
{
integer
}
report_report_host_result_count
= element result_count
{
report_report_host_result_count_page
& report_report_host_result_count_hole
& report_report_host_result_count_warning
& report_report_host_result_count_info
& report_report_host_result_count_log
& report_report_host_result_count_false_positive
}
report_report_host_result_count_page
= element page
{
integer
}
report_report_host_result_count_hole
= element hole
{
report_report_host_result_count_hole_page
}
report_report_host_result_count_hole_page
= element page
{
integer
}
report_report_host_result_count_warning
= element warning
{
report_report_host_result_count_warning_page
}
report_report_host_result_count_warning_page
= element page
{
integer
}
report_report_host_result_count_info
= element info
{
report_report_host_result_count_info_page
}
report_report_host_result_count_info_page
= element page
{
integer
}
report_report_host_result_count_log
= element log
{
report_report_host_result_count_log_page
}
report_report_host_result_count_log_page
= element page
{
integer
}
report_report_host_result_count_false_positive
= element false_positive
{
report_report_host_result_count_false_positive_page
}
report_report_host_result_count_false_positive_page
= element page
{
integer
}
report_report_host_detail
= element detail
{
report_report_host_detail_name
& report_report_host_detail_value
& report_report_host_detail_source
& report_report_host_detail_extra
}
report_report_host_detail_name
= element name
{
text
}
report_report_host_detail_value
= element value
{
text
}
report_report_host_detail_source
= element source
{
report_report_host_detail_source_type
& report_report_host_detail_source_name
& report_report_host_detail_source_description
}
report_report_host_detail_source_type
= element type
{
text
}
report_report_host_detail_source_name
= element name
{
text
}
report_report_host_detail_source_description
= element description
{
text
}
report_report_host_detail_extra
= element extra
{
text
}
report_report_timestamp
= element timestamp
{
iso_time
}
report_report_scan_start
= element scan_start
{
iso_time
}
report_report_host_start
= element host_start
{
text # RNC limitation: iso_time
& report_report_host_start_host
}
report_report_host_start_host
= element host
{
text
}
report_report_host_end
= element host_end
{
text # RNC limitation: iso_time
& report_report_host_end_host
}
report_report_host_end_host
= element host
{
text
}
report_report_scan_end
= element scan_end
{
iso_time
}
report_report_errors
= element errors
{
report_report_errors_count
& report_report_errors_error*
}
report_report_errors_count
= element count
{
}
report_report_errors_error
= element error
{
report_report_errors_error_host
& report_report_errors_error_port
& report_report_errors_error_description
& report_report_errors_error_nvt
& report_report_errors_error_scan_nvt_version
& report_report_errors_error_severity
}
report_report_errors_error_host
= element host
{
text
& report_report_errors_error_host_asset
}
report_report_errors_error_host_asset
= element asset
{
attribute asset_id { uuid }
}
report_report_errors_error_port
= element port
{
port
}
report_report_errors_error_description
= element description
{
text
}
report_report_errors_error_nvt
= element nvt
{
attribute oid { }
& report_report_errors_error_nvt_name
& report_report_errors_error_nvt_type
& report_report_errors_error_nvt_cvss_base
}
report_report_errors_error_nvt_name
= element name
{
text
}
report_report_errors_error_nvt_type
= element type
{
text
}
report_report_errors_error_nvt_cvss_base
= element cvss_base
{
severity
}
report_report_errors_error_scan_nvt_version
= element scan_nvt_version
{
text
}
report_report_errors_error_severity
= element severity
{
severity
}
7 Command Details7.1 Command authenticateIn short: Authenticate with the manager. The client uses the authenticate command to authenticate with the Manager. The client normally executes this command at the beginning of each connection. The only commands permitted before authentication are get_version and commands. 7.1.1 Structure
7.1.2 RNC
Command
authenticate
= element authenticate
{
authenticate_credentials
}
authenticate_credentials
= element credentials
{
authenticate_credentials_username
& authenticate_credentials_password
}
authenticate_credentials_username
= element username
{
text
}
authenticate_credentials_password
= element password
{
text
}
authenticate_response
= element authenticate_response
{
attribute status { status }
& attribute status_text { text }
& authenticate_response_role
& authenticate_response_timezone
}
authenticate_response_role
= element role # type UserAdminSuper AdminObserver
{
}
authenticate_response_timezone
= element timezone
{
timezone
}
7.1.3 Example: Authenticate with a good password
Client
<authenticate>
<credentials>
<username>sally</username>
<password>secret</password>
</credentials>
</authenticate>
<authenticate_response status="200"
status_text="OK">
<role>User</role>
<timezone>UTC</timezone>
</authenticate_response>
7.1.3 Example: Authenticate with a bad password
Client
<authenticate>
<credentials>
<username>sally</username>
<password>secrte</password>
</credentials>
</authenticate>
<authenticate_response status="400"
status_text="Authentication failed"/>
7.2 Command commandsIn short: Run a list of commands. The client uses the commands command to run a list of commands. The elements are executed as OMP commands in the given sequence. The reply contains the result of each command, in the same order as the given commands. 7.2.1 Structure
7.2.2 RNC
Command
commands
= element commands
{
( authenticate
| commands
| create_agent
| create_alert
| create_asset
| create_config
| create_credential
| create_filter
| create_group
| create_note
| create_override
| create_permission
| create_port_list
| create_port_range
| create_report_format
| create_role
| create_scanner
| create_schedule
| create_tag
| create_target
| create_task
| create_user
| delete_agent
| delete_alert
| delete_asset
| delete_config
| delete_credential
| delete_filter
| delete_group
| delete_note
| delete_override
| delete_permission
| delete_report
| delete_report_format
| delete_role
| delete_port_list
| delete_port_range
| delete_scanner
| delete_schedule
| delete_tag
| delete_target
| delete_task
| delete_user
| describe_auth
| empty_trashcan
| get_agents
| get_alerts
| get_assets
| get_configs
| get_credentials
| get_feeds
| get_filters
| get_groups
| get_info
| get_notes
| get_nvts
| get_nvt_families
| get_overrides
| get_permissions
| get_port_lists
| get_preferences
| get_reports
| get_report_formats
| get_results
| get_roles
| get_scanners
| get_schedules
| get_settings
| get_system_reports
| get_tags
| get_targets
| get_tasks
| get_users
| get_version
| help
| modify_agent
| modify_alert
| modify_asset
| modify_auth
| modify_config
| modify_credential
| modify_filter
| modify_group
| modify_note
| modify_override
| modify_permission
| modify_port_list
| modify_report
| modify_report_format
| modify_role
| modify_scanner
| modify_schedule
| modify_setting
| modify_tag
| modify_target
| modify_task
| modify_user
| restore
| resume_task
| run_wizard
| start_task
| stop_task
| sync_feed
| sync_config
| sync_scap
| sync_cert
| test_alert
| verify_agent
| verify_report_format
| verify_scanner )*
}
commands_response
= element commands_response
{
attribute status { status }
& attribute status_text { text }
& ( authenticate_response
| commands_response
| create_agent_response
| create_alert_response
| create_asset_response
| create_config_response
| create_credential_response
| create_filter_response
| create_group_response
| create_note_response
| create_override_response
| create_permission_response
| create_port_list_response
| create_port_range_response
| create_role_response
| create_scanner_response
| create_schedule_response
| create_tag_response
| create_target_response
| create_task_response
| create_user_response
| delete_agent_response
| delete_alert_response
| delete_asset_response
| delete_config_response
| delete_credential_response
| delete_filter_response
| delete_group_response
| delete_note_response
| delete_override_response
| delete_permission_response
| delete_port_list_response
| delete_port_range_response
| delete_report_response
| delete_report_format_response
| delete_role_response
| delete_scanner_response
| delete_schedule_response
| delete_tag_response
| delete_target_response
| delete_task_response
| delete_user_response
| describe_auth_response
| empty_trashcan_response
| get_agents_response
| get_alerts_response
| get_assets_response
| get_configs_response
| get_credentials_response
| get_groups_response
| get_info_response
| get_feeds_response
| get_filters_response
| get_notes_response
| get_nvts_response
| get_nvt_families_response
| get_overrides_response
| get_permissions_response
| get_port_lists_response
| get_preferences_response
| get_reports_response
| get_report_formats_response
| get_results_response
| get_roles_response
| get_scanners_response
| get_schedules_response
| get_settings_response
| get_system_reports_response
| get_tags_response
| get_targets_response
| get_tasks_response
| get_users_response
| get_version_response
| help_response
| modify_agent_response
| modify_alert_response
| modify_asset_response
| modify_auth_response
| modify_config_response
| modify_credential_response
| modify_filter_response
| modify_group_response
| modify_note_response
| modify_override_response
| modify_permission_response
| modify_port_list_response
| modify_report_response
| modify_report_format_response
| modify_role_response
| modify_scanner_response
| modify_schedule_response
| modify_setting_response
| modify_tag_response
| modify_target_response
| modify_task_response
| modify_user_response
| restore_response
| resume_task_response
| run_wizard_response
| start_task_response
| stop_task_response
| sync_feed_response
| sync_config_response
| sync_scap_response
| sync_cert_response
| test_alert_response
| verify_agent_response
| verify_report_format_response
| verify_scanner_response )*
}
7.3 Command create_agentIn short: Create an agent. The client uses the create_agent command to create a new agent. 7.3.1 Structure
7.3.2 RNC
Command
create_agent
= element create_agent
{
create_agent_installer
& create_agent_name
& create_agent_comment?
& create_agent_copy?
& create_agent_howto_install?
& create_agent_howto_use?
}
create_agent_installer
= element installer
{
text # RNC limitation: base64
& create_agent_installer_signature
}
create_agent_installer_signature
= element signature
{
base64
}
create_agent_name
= element name
{
name
}
create_agent_comment
= element comment
{
text
}
create_agent_copy
= element copy
{
uuid
}
create_agent_howto_install
= element howto_install
{
base64
}
create_agent_howto_use
= element howto_use
{
base64
}
create_agent_response
= element create_agent_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.3.3 Example: Create an agent
Client
<create_agent>
<installer>
asdf3235saf3kjBVF...
<signature>iEYEABECAAYFA...</signature>
</installer>
<name>SLAD</name>
</create_agent>
<create_agent_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.4 Command create_alertIn short: Create an alert. The client uses the create_alert command to create a new alert. 7.4.1 Structure
7.4.2 RNC
Command
create_alert
= element create_alert
{
create_alert_name
& create_alert_comment?
& create_alert_copy?
& create_alert_condition
& create_alert_event
& create_alert_method
& create_alert_filter
}
create_alert_name
= element name
{
name
}
create_alert_comment
= element comment
{
text
}
create_alert_copy
= element copy
{
uuid
}
create_alert_condition
= element condition
{
text
& create_alert_condition_data*
}
create_alert_condition_data
= element data
{
text
& create_alert_condition_data_name
}
create_alert_condition_data_name
= element name
{
text
}
create_alert_event
= element event
{
text
& create_alert_event_data*
}
create_alert_event_data
= element data
{
text
& create_alert_event_data_name
}
create_alert_event_data_name
= element name
{
text
}
create_alert_method
= element method
{
text
& create_alert_method_data*
}
create_alert_method_data
= element data
{
text
& create_alert_method_data_name
}
create_alert_method_data_name
= element name
{
text
}
create_alert_filter
= element filter
{
attribute id { uuid }
}
create_alert_response
= element create_alert_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.4.3 Example: Create an alert
Client
<create_alert>
<name>emergency</name>
<condition>
Severity at least
<data>
5.5
<name>severity</name>
</data>
</condition>
<event>
Task run status changed
<data>
Done
<name>status</name>
</data>
</event>
<method>
Email
<data>
sally@example.org
<name>to_address</name>
</data>
<data>
bob@example.org
<name>from_address</name>
</data>
</method>
</create_alert>
<create_alert_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.5 Command create_assetIn short: Create an asset. The client uses the create_asset command to create a new asset. 7.5.1 Structure
7.5.2 RNC
Command
create_asset
= element create_asset
{
( create_asset_asset
| create_asset_report )
}
create_asset_asset
= element asset
{
create_asset_asset_name
& create_asset_asset_comment
}
create_asset_asset_name
= element name
{
name
}
create_asset_asset_comment
= element comment
{
text
}
create_asset_report
= element report
{
attribute id { uuid }
& create_asset_report_filter
}
create_asset_report_filter
= element filter
{
create_asset_report_filter_term
}
create_asset_report_filter_term
= element term
{
text
}
create_asset_response
= element create_asset_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.5.3 Example: Create an asset
Client
<create_asset>
<asset>
<type>host</type>
<name>Localhost</name>
</asset>
</create_asset>
<create_asset_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.6 Command create_configIn short: Create a config. The client uses the create_config command to create a new config. This command can be called in three ways:
7.6.1 Structure
7.6.2 RNC
Command
create_config
= element create_config
{
create_config_comment?
& ( create_config_copy
| get_configs_response )
& create_config_name
}
create_config_comment
= element comment
{
text
}
create_config_copy
= element copy
{
uuid
}
create_config_name
= element name
{
name
}
create_config_response
= element create_config_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.6.3 Example: Copy a config
Client
<create_config> <copy>daba56c8-73ec-11df-a475-002264764cea</copy> <name>Full</name> </create_config> <create_config_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.6.3 Example: Create a config from a GET_CONFIGS response
Client
<create_config>
<get_configs_response>
<config id="daba56c8-73ec-11df-a475-002264764cea">
<name>Full and fast</name>
...
</config>
</get_configs_response>
</create_config>
<create_config_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.7 Command create_credentialIn short: Create a credential. The client uses the create_credential command to create a new credential for local security checks and other functions requiring authentication. If the command includes a key, then the manager creates a key-based credential from the key. If the command includes a password, then the manager creates a password only credential. Otherwise the manager autogenerates a key-based credential. 7.7.1 Structure
7.7.2 RNC
Command
create_credential
= element create_credential
{
create_credential_name
& create_credential_comment?
& create_credential_copy?
& create_credential_allow_insecure?
& create_credential_certificate?
& create_credential_key?
& create_credential_login?
& create_credential_password?
& create_credential_auth_algorithm?
& create_credential_community?
& create_credential_privacy?
& create_credential_type?
}
create_credential_name
= element name
{
name
}
create_credential_comment
= element comment
{
text
}
create_credential_copy
= element copy
{
uuid
}
create_credential_allow_insecure
= element allow_insecure
{
boolean
}
create_credential_certificate
= element certificate
{
text
}
create_credential_key
= element key
{
create_credential_key_phrase
& create_credential_key_private
}
create_credential_key_phrase
= element phrase
{
text
}
create_credential_key_private
= element private
{
text
}
create_credential_login
= element login
{
text
}
create_credential_password
= element password
{
text
}
create_credential_community
= element community
{
text
}
create_credential_auth_algorithm
= element auth_algorithm
{
xsd:token { pattern = "md5|sha1" }
}
create_credential_privacy
= element privacy
{
create_credential_privacy_algorithm
& create_credential_privacy_password
}
create_credential_privacy_algorithm
= element algorithm
{
xsd:token { pattern = "aes|des" }
}
create_credential_privacy_password
= element password
{
text
}
create_credential_type
= element type
{
xsd:token { pattern = "cc|snmp|up|usk" }
}
create_credential_response
= element create_credential_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.7.3 Example: Create an LSC credential
Client
<create_credential> <name>cluster sally</name> <login>sally</login> <password>secret</password> <comment>Sally's login to the cluster.</comment> </create_credential> <create_credential_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.8 Command create_filterIn short: Create a filter. The client uses the create_filter command to create a new filter. 7.8.1 Structure
7.8.2 RNC
Command
create_filter
= element create_filter
{
create_filter_name
& create_filter_comment?
& create_filter_copy?
& create_filter_term?
& create_filter_type?
}
create_filter_name
= element name
{
text # RNC limitation: name
& create_filter_name_make_unique
}
create_filter_name_make_unique
= element make_unique
{
boolean
}
create_filter_comment
= element comment
{
text
}
create_filter_copy
= element copy
{
uuid
}
create_filter_term
= element term
{
text
}
create_filter_type
= element type
{
text
}
create_filter_response
= element create_filter_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.8.3 Example: Create a filter
Client
<create_filter> <name>Single Targets</name> <comment>Targets with only one host</comment> <term>ips=1 first=1 rows=-2</term> <type>target</type> </create_filter> <create_filter_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c7"/>
7.9 Command create_groupIn short: Create a group. The client uses the create_group command to create a new group. 7.9.1 Structure
7.9.2 RNC
Command
create_group
= element create_group
{
create_group_name
& create_group_comment?
& create_group_copy?
& create_group_specials?
& create_group_users?
}
create_group_name
= element name
{
name
}
create_group_comment
= element comment
{
text
}
create_group_copy
= element copy
{
uuid
}
create_group_specials
= element specials
{
create_group_specials_full
}
create_group_specials_full
= element full
{
""
}
create_group_users
= element users
{
text
}
create_group_response
= element create_group_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.9.3 Example: Create a group
Client
<create_group> <name>Managers</name> <users>sarah, bob</users> </create_group> <create_group_response status="201"
status_text="OK, resource created"
id="d94211b6-ba40-11e3-bcb1-406186ea4fc5"/>
7.10 Command create_noteIn short: Create a note. The client uses the create_note command to create a new note. 7.10.1 Structure
7.10.2 RNC
Command
create_note
= element create_note
{
create_note_text
& create_note_nvt
& create_note_active?
& create_note_comment?
& create_note_copy?
& create_note_hosts?
& create_note_port?
& create_note_result?
& create_note_severity?
& create_note_task?
& create_note_threat?
}
create_note_text
= element text
{
text
}
create_note_nvt
= element nvt
{
attribute oid { oid }
}
create_note_active
= element active
{
integer
}
create_note_comment
= element comment
{
text
}
create_note_copy
= element copy
{
uuid
}
create_note_hosts
= element hosts
{
text
}
create_note_port
= element port
{
text
}
create_note_result
= element result
{
attribute id { uuid }
}
create_note_severity
= element severity
{
severity
}
create_note_task
= element task
{
attribute id { uuid }
}
create_note_threat
= element threat
{
threat
}
create_note_response
= element create_note_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.10.3 Example: Create a note
Client
<create_note> <text>This issue should be resolved after the upgrade.</text> <nvt oid="1.3.6.1.4.1.25623.1.0.10330"/> <result>254cd3ef-bbe1-4d58-859d-21b8d0c046c6</result> </create_note> <create_note_response status="202"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.11 Command create_overrideIn short: Create an override. The client uses the create_override command to create a new override. 7.11.1 Structure
7.11.2 RNC
Command
create_override
= element create_override
{
create_override_text
& create_override_nvt
& create_override_active?
& create_override_comment?
& create_override_copy?
& create_override_hosts?
& create_override_new_severity?
& create_override_new_threat?
& create_override_port?
& create_override_result?
& create_override_severity?
& create_override_task?
& create_override_threat?
}
create_override_text
= element text
{
text
}
create_override_active
= element active
{
integer
}
create_override_nvt
= element nvt
{
attribute oid { oid }
}
create_override_comment
= element comment
{
text
}
create_override_copy
= element copy
{
uuid
}
create_override_hosts
= element hosts
{
text
}
create_override_new_severity
= element new_severity
{
severity
}
create_override_new_threat
= element new_threat
{
threat
}
create_override_port
= element port
{
text
}
create_override_result
= element result
{
attribute id { uuid }
}
create_override_severity
= element severity
{
severity
}
create_override_task
= element task
{
attribute id { uuid }
}
create_override_threat
= element threat
{
threat
}
create_override_response
= element create_override_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.11.3 Example: Create an override
Client
<create_override> <text>This is actually of little concern.</text> <nvt oid="1.3.6.1.4.1.25623.1.0.10330"/> <new_threat>Low</new_threat> <result>254cd3ef-bbe1-4d58-859d-21b8d0c046c6</result> </create_override> <create_override_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.12 Command create_permissionIn short: Create a permission. The client uses the create_permission command to create a new permission. 7.12.1 Structure
7.12.2 RNC
Command
create_permission
= element create_permission
{
create_permission_name
& create_permission_subject
& create_permission_resource?
& create_permission_copy?
& create_permission_comment?
}
create_permission_name
= element name
{
text
}
create_permission_subject
= element subject
{
attribute id { uuid }?
& create_permission_subject_type
}
create_permission_subject_type
= element type
{
text
}
create_permission_resource
= element resource
{
attribute id { uuid }?
& create_permission_resource_type
}
create_permission_resource_type
= element type
{
text
}
create_permission_copy
= element copy
{
uuid
}
create_permission_comment
= element comment
{
text
}
create_permission_response
= element create_permission_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.12.3 Example: Grant a user permission to view a target
Client
<create_permission>
<name>get_target</name>
<resource id="b493b7a8-7489-11df-a3ec-002264764cea"/>
<subject id="66abe5ce-c011-11e3-b96e-406186ea4fc5">
<type>user</type>
</subject>
</create_permission>
<create_permission_response status="201"
status_text="OK, resource created"
id="7ee79232-c011-11e3-b560-406186ea4fc5"/>
7.12.3 Example: Grant a role permission to create users
Client
<create_permission>
<name>create_user</name>
<subject id="9b0cbd98-c011-11e3-a26e-406186ea4fc5">
<type>role</type>
</subject>
</create_permission>
<create_permission_response status="201"
status_text="OK, resource created"
id="b98ad69c-c011-11e3-b001-406186ea4fc5"/>
7.13 Command create_port_listIn short: Create a port list. The client uses the create_port_list command to create a new port list. The get_port_lists_response element overrides the port_range element. 7.13.1 Structure
7.13.2 RNC
Command
create_port_list
= element create_port_list
{
create_port_list_name
& create_port_list_comment?
& create_port_list_copy?
& create_port_list_port_range
& get_port_lists_response
}
create_port_list_name
= element name
{
name
}
create_port_list_comment
= element comment
{
text
}
create_port_list_copy
= element copy
{
uuid
}
create_port_list_port_range
= element port_range
{
text
}
create_port_list_response
= element create_port_list_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.13.3 Example: Create a port list
Client
<create_port_list> <name>All TCP</name> <comment>All possible TCP ports</comment> <port_range>T:1-65535</port_range> </create_port_list> <create_port_list_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.14 Command create_port_rangeIn short: Create a port range. The client uses the create_port_range command to create a new port range. 7.14.1 Structure
7.14.2 RNC
Command
create_port_range
= element create_port_range
{
create_port_range_comment?
& create_port_range_port_list
& create_port_range_start
& create_port_range_end
& create_port_range_type
}
create_port_range_comment
= element comment
{
text
}
create_port_range_port_list
= element port_list
{
attribute id { uuid }
}
create_port_range_start
= element start
{
port
}
create_port_range_end
= element end
{
port
}
create_port_range_type
= element type
{
text
}
create_port_range_response
= element create_port_range_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.14.3 Example: Add a port range to a port list
Client
<create_port_range> <port_list id="354cd3ef-bbe1-4d58-859d-21b8d0c046c4"/> <start>777</start> <end>779</end> <type>TCP</type> </create_port_range> <create_port_range_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.15 Command create_reportIn short: Create a report. The client uses the create_report command to import a report. 7.15.1 Structure
7.15.2 RNC
Command
create_report
= element create_report
{
create_report_report
& create_report_task
& create_report_in_assets?
}
create_report_report
= element report # type report
{
text # RNC limitation: base64
& attribute id { uuid }
& attribute format_id { uuid }
& attribute extension { text }
& attribute content_type { text }
& attribute type { xsd:token { pattern = "scan|assets|prognostic" } }?
& report_owner
& report_name
& report_comment
& report_creation_time
& report_modification_time
& report_writable
& report_in_use
& report_task
& report_report_format
& report_report
}
create_report_task
= element task
{
attribute id { uuid }?
& create_report_task_name?
& create_report_task_comment?
}
create_report_task_name
= element name
{
name
}
create_report_task_comment
= element comment
{
text
}
create_report_in_assets
= element in_assets # type boolean
{
}
create_report_response
= element create_report_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.15.3 Example: Create a report in an existing task
Client
<create_report>
<report id="f0fdf522-276d-4893-9274-fb8699dc2270"
format_id="d5da9f67-8551-4e51-807b-b6a873d70e34"
extension="xml"
content_type="text/xml">
<report id="f0fdf522-276d-4893-9274-fb8699dc2270">
<omp>
<version>7.0</version>
</omp>
...
<results start="1"
max="-1">
<result id="634f7a2e-8ca1-43b7-b6d7-0d4841449508">
...
</result>
...
</results>
<host_start>
2010-02-02T19:11:21+00:00
<host>127.0.1.1</host>
</host_start>
<host_end>
2010-02-02T19:11:52+00:00
<host>127.0.1.1</host>
</host_end>
<scan_end>2010-02-02T19:11:52+00:00</scan_end>
<errors>
<count>0</count>
</errors>
</report>
</report>
<task id="76a4f237-9984-4345-a1f4-71fbcbf0611c"/>
</create_report>
<create_report_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.16 Command create_report_formatIn short: Create a report format. The client uses the create_report_format command to create a new report format. 7.16.1 Structure
7.16.2 RNC
Command
create_report_format
= element create_report_format
{
( create_report_format_copy
| get_report_formats_response )
}
create_report_format_copy
= element copy
{
uuid
}
create_report_format_response
= element create_report_format_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.16.3 Example: Create a report format
Client
<create_report_format>
<get_report_formats_response>
<report_format id="a0704abb-2120-489f-959f-251c9f4ffebd">
<name>CPE</name>
<extension>csv</extension>
<content_type>text/csv</content_type>
<summary>Common Product Enumeration CSV table.</summary>
<description>
CPE stands for Common Product Enumeration. It is a
...
</description>
<predefined>1</predefined>
<trust>
yes
<time>Thu Dec 2 13:22:26 2010</time>
</trust>
<active>1</active>
</report_format>
</get_report_formats_response>
</create_report_format>
<create_report_format_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.17 Command create_roleIn short: Create a role. The client uses the create_role command to create a new role. 7.17.1 Structure
7.17.2 RNC
Command
create_role
= element create_role
{
create_role_name
& create_role_comment?
& create_role_copy?
& create_role_users?
}
create_role_name
= element name
{
name
}
create_role_comment
= element comment
{
text
}
create_role_copy
= element copy
{
uuid
}
create_role_users
= element users
{
text
}
create_role_response
= element create_role_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.17.3 Example: Create a role
Client
<create_role> <name>SCAP Observer</name> <users>sarah, bob</users> </create_role> <create_role_response status="201"
status_text="OK, resource created"
id="b64c81b2-b9de-11e3-a2e9-406186ea4fc5"/>
7.18 Command create_scannerIn short: Create a scanner. The client uses the create_scanner command to create a new scanner. 7.18.1 Structure
7.18.2 RNC
Command
create_scanner
= element create_scanner
{
create_scanner_name
& create_scanner_comment?
& create_scanner_copy?
& create_scanner_host
& create_scanner_port
& create_scanner_type
& create_scanner_ca_pub
& create_scanner_credential
}
create_scanner_name
= element name
{
name
}
create_scanner_comment
= element comment
{
text
}
create_scanner_copy
= element copy
{
uuid
}
create_scanner_host
= element host
{
text
}
create_scanner_port
= element port
{
text
}
create_scanner_type
= element type
{
text
}
create_scanner_ca_pub
= element ca_pub
{
text
}
create_scanner_credential
= element credential
{
attribute id { uuid }
}
create_scanner_response
= element create_scanner_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.18.3 Example: Create a scanner
Client
<create_scanner> <name>Default Scanner</name> <host>localhost</host> <port>9391</port> <type>2</type> <ca_pub>...</ca_pub> <credential id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/> </create_scanner> <create_scanner_response status="201"
status_text="OK, resource created"
id="814cd30f-dee1-4d58-851d-21b8d0c048e3"/>
7.19 Command create_scheduleIn short: Create a schedule. The client uses the create_schedule command to create a new schedule. 7.19.1 Structure
7.19.2 RNC
Command
create_schedule
= element create_schedule
{
create_schedule_name
& create_schedule_comment?
& create_schedule_copy?
& create_schedule_first_time?
& create_schedule_duration?
& create_schedule_period?
& create_schedule_timezone?
}
create_schedule_name
= element name
{
name
}
create_schedule_comment
= element comment
{
text
}
create_schedule_copy
= element copy
{
uuid
}
create_schedule_first_time
= element first_time
{
create_schedule_first_time_minute
& create_schedule_first_time_hour
& create_schedule_first_time_day_of_month
& create_schedule_first_time_month
& create_schedule_first_time_year
}
create_schedule_first_time_minute
= element minute
{
integer
}
create_schedule_first_time_hour
= element hour
{
integer
}
create_schedule_first_time_day_of_month
= element day_of_month
{
integer
}
create_schedule_first_time_month
= element month
{
integer
}
create_schedule_first_time_year
= element year
{
integer
}
create_schedule_duration
= element duration
{
create_schedule_duration_unit
}
create_schedule_duration_unit
= element unit
{
time_unit
}
create_schedule_period
= element period
{
create_schedule_period_unit
}
create_schedule_period_unit
= element unit
{
time_unit
}
create_schedule_timezone
= element timezone
{
timezone
}
create_schedule_response
= element create_schedule_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.19.3 Example: Create a schedule
Client
<create_schedule>
<name>Every night</name>
<first_time>
<day_of_month>1</day_of_month>
<hour>0</hour>
<minute>0</minute>
<month>1</month>
<year>2011</year>
</first_time>
<duration>
3
<unit>hour</unit>
</duration>
<period>
1
<unit>day</unit>
</period>
</create_schedule>
<create_schedule_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.20 Command create_tagIn short: Create a tag. The client uses the create_tag command to create a new tag. A name and the resource type must be provided. If a resource ID is also given, it must refer to an existing resource. 7.20.1 Structure
7.20.2 RNC
Command
create_tag
= element create_tag
{
create_tag_name
& create_tag_resource
& create_tag_copy?
& create_tag_value?
& create_tag_comment?
& create_tag_active?
}
create_tag_name
= element name
{
text
}
create_tag_resource
= element resource
{
attribute id { uuid }?
& create_tag_resource_type
}
create_tag_resource_type
= element type
{
text
}
create_tag_copy
= element copy
{
uuid
}
create_tag_value
= element value
{
text
}
create_tag_comment
= element comment
{
text
}
create_tag_active
= element active
{
boolean
}
create_tag_response
= element create_tag_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.20.3 Example: Create a tag attached to a target
Client
<create_tag>
<name>geo:long</name>
<resource id="b493b7a8-7489-11df-a3ec-002264764cea">
<type>target</type>
</resource>
<value>52.2788</value>
</create_tag>
<create_tag_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.21 Command create_targetIn short: Create a target. The client uses the create_target command to create a new target. If the list of hosts is empty, the command must also include a target locator. 7.21.1 Structure
7.21.2 RNC
Command
create_target
= element create_target
{
create_target_name
& create_target_comment?
& create_target_copy?
& ( create_target_asset_hosts
| create_target_hosts )
& create_target_exclude_hosts?
& create_target_ssh_credential?
& create_target_smb_credential?
& create_target_esxi_credential?
& create_target_snmp_credential?
& create_target_ssh_lsc_credential?
& create_target_smb_lsc_credential?
& create_target_esxi_lsc_credential?
& create_target_alive_tests?
& create_target_reverse_lookup_only?
& create_target_reverse_lookup_unify?
& create_target_port_range?
& create_target_port_list?
}
create_target_name
= element name
{
text # RNC limitation: name
& create_target_name_make_unique
}
create_target_name_make_unique
= element make_unique
{
boolean
}
create_target_comment
= element comment
{
text
}
create_target_copy
= element copy
{
uuid
}
create_target_asset_hosts
= element asset_hosts
{
attribute filter { text }
}
create_target_hosts
= element hosts
{
text
}
create_target_exclude_hosts
= element exclude_hosts
{
text
}
create_target_ssh_credential
= element ssh_credential
{
attribute id { uuid }
& create_target_ssh_credential_port?
}
create_target_ssh_credential_port
= element port
{
text
}
create_target_smb_credential
= element smb_credential
{
attribute id { uuid }
}
create_target_esxi_credential
= element esxi_credential
{
attribute id { uuid }
}
create_target_snmp_credential
= element snmp_credential
{
attribute id { uuid }
}
create_target_ssh_lsc_credential
= element ssh_lsc_credential
{
attribute id { uuid }
& create_target_ssh_lsc_credential_port?
}
create_target_ssh_lsc_credential_port
= element port
{
text
}
create_target_smb_lsc_credential
= element smb_lsc_credential
{
attribute id { uuid }
}
create_target_esxi_lsc_credential
= element esxi_lsc_credential
{
attribute id { uuid }
}
create_target_alive_tests
= element alive_tests
{
alive_test
}
create_target_reverse_lookup_only
= element reverse_lookup_only
{
boolean
}
create_target_reverse_lookup_unify
= element reverse_lookup_unify
{
boolean
}
create_target_port_range
= element port_range
{
text
}
create_target_port_list
= element port_list
{
attribute id { uuid }
}
create_target_response
= element create_target_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.21.3 Example: Create a target, giving a host list
Client
<create_target> <name>All GNU/Linux machines</name> <hosts>192.168.1.0/24</hosts> </create_target> <create_target_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.22 Command create_taskIn short: Create a task. The client uses the create_task command to create a new task. 7.22.1 Structure
7.22.2 RNC
Command
create_task
= element create_task
{
create_task_name
& create_task_comment?
& create_task_copy?
& create_task_alterable?
& create_task_config
& create_task_target
& create_task_hosts_ordering?
& create_task_scanner
& create_task_alert*
& create_task_schedule?
& create_task_schedule_periods?
& create_task_observers?
& create_task_preferences?
}
create_task_name
= element name
{
name
}
create_task_comment
= element comment
{
text
}
create_task_copy
= element copy
{
uuid
}
create_task_alterable
= element alterable
{
boolean
}
create_task_config
= element config
{
attribute id { uuid }
}
create_task_target
= element target
{
attribute id { uuid }
}
create_task_hosts_ordering
= element hosts_ordering
{
text
}
create_task_scanner
= element scanner
{
attribute id { uuid }
}
create_task_alert
= element alert
{
attribute id { uuid }
}
create_task_schedule
= element schedule
{
attribute id { uuid }
}
create_task_schedule_periods
= element schedule_periods
{
integer
}
create_task_observers
= element observers
{
user_list
}
create_task_preferences
= element preferences
{
create_task_preferences_preference*
}
create_task_preferences_preference
= element preference
{
create_task_preferences_preference_scanner_name
& create_task_preferences_preference_value
}
create_task_preferences_preference_scanner_name
= element scanner_name
{
text
}
create_task_preferences_preference_value
= element value
{
text
}
create_task_response
= element create_task_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.22.3 Example: Create a task, giving a host list
Client
<create_task> <name>Scan Webserver</name> <comment>Hourly scan of the webserver</comment> <config id="daba56c8-73ec-11df-a475-002264764cea"/> <target id="b493b7a8-7489-11df-a3ec-002264764cea"/> <scanner id="15348381-3180-213f-4eec-123591912388"/> </create_task> <create_task_response status="201"
status_text="OK, resource created"
id="254cd3ef-bbe1-4d58-859d-21b8d0c046c6"/>
7.23 Command create_userIn short: Create a user. The client uses the create_user command to create a new user. 7.23.1 Structure
7.23.2 RNC
Command
create_user
= element create_user
{
create_user_name
& create_user_copy?
& create_user_hosts?
& create_user_ifaces?
& create_user_password?
& create_user_role*
}
create_user_name
= element name
{
text
}
create_user_copy
= element copy
{
uuid
}
create_user_hosts
= element hosts
{
text
& attribute allow { boolean }?
}
create_user_ifaces
= element ifaces
{
text
& attribute allow { boolean }?
}
create_user_password
= element password
{
text
}
create_user_role
= element role
{
attribute id { uuid }
}
create_user_response
= element create_user_response
{
attribute status { status }
& attribute status_text { text }
& attribute id { uuid }
}
7.23.3 Example: Create a user
Client
<create_user> <name>foobar</name> <password>f00bar</password> <role id="8d453140-b74d-11e2-b0be-406186ea4fc5"/> </create_user> <create_user_response status="201"
status_text="OK, resource created"/>
7.24 Command delete_agentIn short: Delete an agent. The client uses the delete_agent command to delete an existing agent. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.24.1 Structure
7.24.2 RNC
Command
delete_agent
= element delete_agent
{
attribute agent_id { uuid }
& attribute ultimate { boolean }
}
delete_agent_response
= element delete_agent_response
{
attribute status { status }
& attribute status_text { text }
}
7.24.3 Example: Delete an agent
Client
<delete_agent agent_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_agent_response status="200"
status_text="OK"/>
7.25 Command delete_assetIn short: Delete an asset. The client uses the delete_asset command to delete an existing asset. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.25.1 Structure
7.25.2 RNC
Command
delete_asset
= element delete_asset
{
( attribute asset_id { uuid }
| attribute report_id { uuid } )
}
delete_asset_response
= element delete_asset_response
{
attribute status { status }
& attribute status_text { text }
}
7.25.3 Example: Delete a asset
Client
<delete_asset asset_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_asset_response status="200"
status_text="OK"/>
7.26 Command delete_configIn short: Delete a config. The client uses the delete_config command to delete an existing config. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.26.1 Structure
7.26.2 RNC
Command
delete_config
= element delete_config
{
attribute config_id { uuid }
& attribute ultimate { boolean }
}
delete_config_response
= element delete_config_response
{
attribute status { status }
& attribute status_text { text }
}
7.26.3 Example: Delete a config
Client
<delete_config config_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_config_response status="200"
status_text="OK"/>
7.27 Command delete_alertIn short: Delete an alert. The client uses the delete_alert command to delete an existing alert. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.27.1 Structure
7.27.2 RNC
Command
delete_alert
= element delete_alert
{
attribute alert_id { uuid }
& attribute ultimate { boolean }
}
delete_alert_response
= element delete_alert_response
{
attribute status { status }
& attribute status_text { text }
}
7.27.3 Example: Delete an alert
Client
<delete_alert alert_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_alert_response status="200"
status_text="OK"/>
7.28 Command delete_credentialIn short: Delete a credential. The client uses the delete_credential command to delete an existing credential. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.28.1 Structure
7.28.2 RNC
Command
delete_credential
= element delete_credential
{
attribute credential_id { uuid }
& attribute ultimate { boolean }
}
delete_credential_response
= element delete_credential_response
{
attribute status { status }
& attribute status_text { text }
}
7.28.3 Example: Delete a credential
Client
<delete_credential credential_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_credential_response status="200"
status_text="OK"/>
7.29 Command delete_filterIn short: Delete a filter. The client uses the delete_filter command to delete an existing filter. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.29.1 Structure
7.29.2 RNC
Command
delete_filter
= element delete_filter
{
attribute filter_id { uuid }
& attribute ultimate { boolean }
}
delete_filter_response
= element delete_filter_response
{
attribute status { status }
& attribute status_text { text }
}
7.29.3 Example: Delete a filter
Client
<delete_filter filter_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_filter_response status="200"
status_text="OK"/>
7.30 Command delete_groupIn short: Delete a group. The client uses the delete_group command to delete an existing group. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.30.1 Structure
7.30.2 RNC
Command
delete_group
= element delete_group
{
attribute group_id { uuid }
& attribute ultimate { boolean }
}
delete_group_response
= element delete_group_response
{
attribute status { status }
& attribute status_text { text }
}
7.30.3 Example: Delete a group
Client
<delete_group group_id="d94211b6-ba40-11e3-bcb1-406186ea4fc5"/> <delete_group_response status="200"
status_text="OK"/>
7.31 Command delete_noteIn short: Delete a note. The client uses the delete_note command to delete an existing note. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.31.1 Structure
7.31.2 RNC
Command
delete_note
= element delete_note
{
attribute note_id { uuid }
& attribute ultimate { boolean }
}
delete_note_response
= element delete_note_response
{
attribute status { status }
& attribute status_text { text }
}
7.31.3 Example: Delete a note
Client
<delete_note note_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_note_response status="200"
status_text="OK"/>
7.32 Command delete_overrideIn short: Delete an override. The client uses the delete_override command to delete an existing override. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.32.1 Structure
7.32.2 RNC
Command
delete_override
= element delete_override
{
attribute override_id { uuid }
& attribute ultimate { boolean }
}
delete_override_response
= element delete_override_response
{
attribute status { status }
& attribute status_text { text }
}
7.32.3 Example: Delete an override
Client
<delete_override override_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_override_response status="200"
status_text="OK"/>
7.33 Command delete_reportIn short: Delete a report. The client uses the delete_report command to delete an existing report. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.33.1 Structure7.33.2 RNC
Command
delete_report
= element delete_report
{
attribute report_id { uuid }
}
delete_report_response
= element delete_report_response
{
attribute status { status }
& attribute status_text { text }
}
7.33.3 Example: Delete a report
Client
<delete_report report_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_report_response status="200"
status_text="OK"/>
7.34 Command delete_permissionIn short: Delete a permission. The client uses the delete_permission command to delete an existing permission. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.34.1 Structure
7.34.2 RNC
Command
delete_permission
= element delete_permission
{
attribute permission_id { uuid }
& attribute ultimate { boolean }
}
delete_permission_response
= element delete_permission_response
{
attribute status { status }
& attribute status_text { text }
}
7.34.3 Example: Delete a permission
Client
<delete_permission permission_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_permission_response status="200"
status_text="OK"/>
7.35 Command delete_port_listIn short: Delete a port list. The client uses the delete_port_list command to delete an existing port list. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.35.1 Structure
7.35.2 RNC
Command
delete_port_list
= element delete_port_list
{
attribute port_list_id { uuid }
& attribute ultimate { boolean }
}
delete_port_list_response
= element delete_port_list_response
{
attribute status { status }
& attribute status_text { text }
}
7.35.3 Example: Delete a port list
Client
<delete_port_list port_list_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_port_list_response status="200"
status_text="OK"/>
7.36 Command delete_port_rangeIn short: Delete a port range. The client uses the delete_port_range command to delete an existing port range. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.36.1 Structure7.36.2 RNC
Command
delete_port_range
= element delete_port_range
{
attribute port_range_id { uuid }
}
delete_port_range_response
= element delete_port_range_response
{
attribute status { status }
& attribute status_text { text }
}
7.36.3 Example: Delete a port range
Client
<delete_port_range port_range_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_port_range_response status="200"
status_text="OK"/>
7.37 Command delete_report_formatIn short: Delete a report format. The client uses the delete_report_format command to delete an existing report format. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.37.1 Structure
7.37.2 RNC
Command
delete_report_format
= element delete_report_format
{
attribute report_format_id { uuid }
& attribute ultimate { boolean }
}
delete_report_format_response
= element delete_report_format_response
{
attribute status { status }
& attribute status_text { text }
}
7.37.3 Example: Delete a report format
Client
<delete_report_format report_format_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_report_format_response status="200"
status_text="OK"/>
7.38 Command delete_roleIn short: Delete a role. The client uses the delete_role command to delete an existing role. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.38.1 Structure
7.38.2 RNC
Command
delete_role
= element delete_role
{
attribute role_id { uuid }
& attribute ultimate { boolean }
}
delete_role_response
= element delete_role_response
{
attribute status { status }
& attribute status_text { text }
}
7.38.3 Example: Delete a role
Client
<delete_role role_id="b64c81b2-b9de-11e3-a2e9-406186ea4fc5"/> <delete_role_response status="200"
status_text="OK"/>
7.39 Command delete_scannerIn short: Delete a scanner. The client uses the delete_scanner command to delete an existing scanner. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.39.1 Structure
7.39.2 RNC
Command
delete_scanner
= element delete_scanner
{
attribute scanner_id { uuid }
& attribute ultimate { boolean }
}
delete_scanner_response
= element delete_scanner_response
{
attribute status { status }
& attribute status_text { text }
}
7.39.3 Example: Delete a scanner
Client
<delete_scanner scanner_id="817a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_scanner_response status="200"
status_text="OK"/>
7.40 Command delete_scheduleIn short: Delete a schedule. The client uses the delete_schedule command to delete an existing schedule. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.40.1 Structure
7.40.2 RNC
Command
delete_schedule
= element delete_schedule
{
attribute schedule_id { uuid }
& attribute ultimate { boolean }
}
delete_schedule_response
= element delete_schedule_response
{
attribute status { status }
& attribute status_text { text }
}
7.40.3 Example: Delete a schedule
Client
<delete_schedule schedule_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_schedule_response status="200"
status_text="OK"/>
7.41 Command delete_tagIn short: Delete a tag. The client uses the delete_tag command to delete an existing tag. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.41.1 Structure
7.41.2 RNC
Command
delete_tag
= element delete_tag
{
attribute tag_id { uuid }
& attribute ultimate { boolean }
}
delete_tag_response
= element delete_tag_response
{
attribute status { status }
& attribute status_text { text }
}
7.41.3 Example: Delete a tag
Client
<delete_tag target_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_tag_response status="200"
status_text="OK"/>
7.42 Command delete_targetIn short: Delete a target. The client uses the delete_target command to delete an existing target. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.42.1 Structure
7.42.2 RNC
Command
delete_target
= element delete_target
{
attribute target_id { uuid }
& attribute ultimate { boolean }
}
delete_target_response
= element delete_target_response
{
attribute status { status }
& attribute status_text { text }
}
7.42.3 Example: Delete a target
Client
<delete_target target_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_target_response status="200"
status_text="OK"/>
7.43 Command delete_taskIn short: Delete a task. The client uses the delete_task command to delete an existing task, including all reports associated with the task. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Manager. 7.43.1 Structure
7.43.2 RNC
Command
delete_task
= element delete_task
{
attribute task_id { uuid }
& attribute ultimate { boolean }
}
delete_task_response
= element delete_task_response
{
attribute status { status }
& attribute status_text { text }
}
7.43.3 Example: Delete a task
Client
<delete_task task_id="267a3405-e84a-47da-97b2-5fa0d2e8995e"/> <delete_task_response status="200"
status_text="OK"/>
7.44 Command delete_userIn short: Delete a user. The client uses the delete_user command to delete an existing user. Since this is a destructive command, the client is advised to ask for confirmation from the user before sending this command to the Administrator. 7.44.1 Structure
7.44.2 RNC
Command
delete_user
= element delete_user
{
( attribute user_id { uuid }
| attribute name { text } )
& ( attribute inheritor_id { text }
| attribute inheritor_name { text } )
}
delete_user_response
= element delete_user_response
{
attribute status { status }
& attribute status_text { text }
}
7.44.3 Example: Delete a user
Client
<delete_user name="foobar"/> <delete_user_response status="200"
status_text="OK"/>
7.45 Command describe_authIn short: Describe authentication methods. The client uses the "describe_auth" command to get details about the used authentication methods. The Manager will reply with a list of all used authentication methods if such a list is available. 7.45.1 Structure
7.45.2 RNC
Command
describe_auth
= element describe_auth
{
""
}
describe_auth_response
= element describe_auth_response
{
attribute status { status }
& attribute status_text { text }
& describe_auth_response_group
}
describe_auth_response_group
= element group
{
attribute name { text }
& describe_auth_response_group_auth_conf_setting
}
describe_auth_response_group_auth_conf_setting
= element auth_conf_setting
{
describe_auth_response_group_auth_conf_setting_key
& describe_auth_response_group_auth_conf_setting_value
& describe_auth_response_group_auth_conf_setting_certificate_info?
}
describe_auth_response_group_auth_conf_setting_key
= element key
{
text
}
describe_auth_response_group_auth_conf_setting_value
= element value
{
text
}
describe_auth_response_group_auth_conf_setting_certificate_info
= element certificate_info # type certificate_info
{
certificate_info_time_status
& certificate_info_activation_time
& certificate_info_expiration_time
& certificate_info_issuer
& certificate_info_md5_fingerprint
}
7.45.3 Example: Describe the authentication methods
Client
<describe_auth/> <describe_auth_response status="200"
status_text="OK">
<group name="Foo">
<auth_conf_setting>
<key>Bar</key>
<value>Baz</value>
</auth_conf_setting>
</group>
</describe_auth_response>
7.46 Command empty_trashcanIn short: Empty the trashcan. The client uses the empty_trashcan command to empty the trashcan. 7.46.1 Structure
7.46.2 RNC
Command
empty_trashcan
= element empty_trashcan
{
""
}
empty_trashcan_response
= element empty_trashcan_response
{
attribute status { status }
& attribute status_text { text }
}
7.46.3 Example: Empty the trashcan
Client
<empty_trashcan/> <empty_trashcan_response status="200"
status_text="OK"/>
7.47 Command get_agentsIn short: Get one or many agents. The client uses the get_agents command to get agent information. If the command sent by the client was valid, the manager will reply with a list of agents to the client. If the request includes a format then the agents in the response include installer elements, otherwise they include trust state and time. If the details attribute is set, the response will include the installer. 7.47.1 Structure
|