# Latest

**URL:** https://discuss.rapid7.com/latest.md

[Latest](https://discuss.rapid7.com/latest.md) · [Categories](https://discuss.rapid7.com/categories.md) · [Tags](https://discuss.rapid7.com/tags.md)

---

## [Deploying Rapid7 Collector in AWS](https://discuss.rapid7.com/t/deploying-rapid7-collector-in-aws/57526)

<div class="topic-metadata">

**Author:** [@eeccook](https://discuss.rapid7.com/u/eeccook)\
**Replies:** 0\
**Last updated:** [October 27, 2026, 3:27pm UTC](https://discuss.rapid7.com/t/deploying-rapid7-collector-in-aws/57526 "2026-10-27T15:27:49Z")

</div>

Hello everyone, Currently, we're deploying a Rapid7 Collector proxy server in AWS for some of our ec2 instances. While the Collector works properly on-prem, we're experiencing challenges having the ec2 instances connect…

---

## ["Create Issue in Jira from IDR Investigation" workflow does not appear after import from Extension Library](https://discuss.rapid7.com/t/create-issue-in-jira-from-idr-investigation-workflow-does-not-appear-after-import-from-extension-library/57514)

<div class="topic-metadata">

**Author:** [@jgalleguillos](https://discuss.rapid7.com/u/jgalleguillos)\
**Replies:** 4\
**Last updated:** [October 27, 2026, 2:24pm UTC](https://discuss.rapid7.com/t/create-issue-in-jira-from-idr-investigation-workflow-does-not-appear-after-import-from-extension-library/57514 "2026-10-27T14:24:02Z")

</div>

Hi everyone, We're trying to integrate InsightIDR with Jira Service Management Cloud using the Extension Library workflow "Create Issue in Jira from IDR Investigation" (v2.0.0), but we're running into two issues. Envir…

---

## [Scan completes successfully but shows 0 assets and 0 vulnerabilities (results disappear after completion)](https://discuss.rapid7.com/t/scan-completes-successfully-but-shows-0-assets-and-0-vulnerabilities-results-disappear-after-completion/57524)

<div class="topic-metadata">

**Author:** [@kstara](https://discuss.rapid7.com/u/kstara)\
**Replies:** 0\
**Last updated:** [October 27, 2026, 1:38pm UTC](https://discuss.rapid7.com/t/scan-completes-successfully-but-shows-0-assets-and-0-vulnerabilities-results-disappear-after-completion/57524 "2026-10-27T13:38:50Z")

</div>

Hello, We are experiencing an issue where scans complete successfully, but the results are not retained in the console. What happens: During the scan, the UI correctly shows 1 asset being scanned and finds vulnerabili…

---

## [Report? on group ie software xx has 100 vulnerable assets with 30 cves](https://discuss.rapid7.com/t/report-on-group-ie-software-xx-has-100-vulnerable-assets-with-30-cves/57522)

<div class="topic-metadata">

**Author:** [@lhansen2](https://discuss.rapid7.com/u/lhansen2)\
**Replies:** 0\
**Last updated:** [October 26, 2026, 10:27pm UTC](https://discuss.rapid7.com/t/report-on-group-ie-software-xx-has-100-vulnerable-assets-with-30-cves/57522 "2026-10-26T22:27:30Z")

</div>

Hey Folks, I am looking for a Report in a summary type by group ie Line 1 - software xx has 100 vulnerable assets with 30 cves Line 2 - software xy has 1000 vulnerable assets with 3 cves Any ideas? Apologies, can’t S…

---

## [New Vulnerability Automation Trigger Broken](https://discuss.rapid7.com/t/new-vulnerability-automation-trigger-broken/57521)

<div class="topic-metadata">

**Author:** [@jlee7](https://discuss.rapid7.com/u/jlee7)\
**Replies:** 0\
**Last updated:** [October 26, 2026, 4:54pm UTC](https://discuss.rapid7.com/t/new-vulnerability-automation-trigger-broken/57521 "2026-10-26T16:54:22Z")

</div>

Hello, I was trying to set up automation notifications for new KEV findings in a specific site for InsightVM but it would not trigger. I then created this test automation (vulnerability.cvssScore \> 0 && asset.ipv4 IS NO…

---

## [No vulnerability check yet for CVE-2026-111497 (Brotli decoder / Node.js)](https://discuss.rapid7.com/t/no-vulnerability-check-yet-for-cve-2026-111497-brotli-decoder-node-js/57520)

<div class="topic-metadata">

**Author:** [@astoller](https://discuss.rapid7.com/u/astoller)\
**Replies:** 0\
**Last updated:** [October 26, 2026, 3:53pm UTC](https://discuss.rapid7.com/t/no-vulnerability-check-yet-for-cve-2026-111497-brotli-decoder-node-js/57520 "2026-10-26T15:53:41Z")

</div>

Hi all, CVE-2026-111497 (out-of-bounds write in the Brotli decoder, Google Brotli 1.0.3-1.2.0, also bundled in Node.js 22/24/26; fixed in Node.js 22.23.4, 24.22.1 and 26.12.1) was published on 22 Oct 2026. I cannot find…

---

## [Database configuration Template](https://discuss.rapid7.com/t/database-configuration-template/57519)

<div class="topic-metadata">

**Author:** [@bbilali.ngethu](https://discuss.rapid7.com/u/bbilali.ngethu)\
**Replies:** 0\
**Last updated:** [October 26, 2026, 12:24pm UTC](https://discuss.rapid7.com/t/database-configuration-template/57519 "2026-10-26T12:24:37Z")

</div>

Hi Community, I am hoping someone can help with configuring a scan template for authenticated MSSQL database scanning in InsightVM. SITUATION We are scanning UAT Microsoft SQL Server 2019 instances using InsightVM Eng…

---

## [How to find Assets against particular Solution?](https://discuss.rapid7.com/t/how-to-find-assets-against-particular-solution/11044)

<div class="topic-metadata">

**Author:** [@aa\_adey](https://discuss.rapid7.com/u/aa_adey)\
**Replies:** 3\
**Last updated:** [October 23, 2026, 4:25am UTC](https://discuss.rapid7.com/t/how-to-find-assets-against-particular-solution/11044 "2026-10-23T04:25:51Z")

</div>

If a Solution is showing some ‘x’ number of assets against it how to specifically look for those assets on which the specific Solution is applicable? In short I’m looking for making Query for Assets for which a specific…

---

## [Example use case: ASM Coverage Gap Reporting](https://discuss.rapid7.com/t/example-use-case-asm-coverage-gap-reporting/57513)

<div class="topic-metadata">

**Author:** [@jee\_chung](https://discuss.rapid7.com/u/jee_chung)\
**Replies:** 0\
**Last updated:** [October 22, 2026, 5:29pm UTC](https://discuss.rapid7.com/t/example-use-case-asm-coverage-gap-reporting/57513 "2026-10-22T17:29:36Z")

</div>

Rapid7 ASM’s asset inventory provides an easy way to perform coverage analysis and reporting of EDM and VM tools in use by your organization. Key Points Coverage report - determine which endpoints have which EDM/VM co…

---

## [Cloud reports based on Dashboards with whole numbers](https://discuss.rapid7.com/t/cloud-reports-based-on-dashboards-with-whole-numbers/57496)

<div class="topic-metadata">

**Author:** [@skadish](https://discuss.rapid7.com/u/skadish)\
**Replies:** 1\
**Last updated:** [October 20, 2026, 1:29pm UTC](https://discuss.rapid7.com/t/cloud-reports-based-on-dashboards-with-whole-numbers/57496 "2026-10-20T13:29:13Z")

</div>

In an InsightVM dashboard, it’s possible to toggle between actual numbers and truncated numbers (for instance, between 4.2k and 4,265.) But if you make a cloud report based on a dashboard, it only runs with the truncate…

---

## [Search by Solution - Low Hanging Fruit](https://discuss.rapid7.com/t/search-by-solution-low-hanging-fruit/57453)

<div class="topic-metadata">

**Author:** [@lhansen2](https://discuss.rapid7.com/u/lhansen2)\
**Replies:** 6\
**Last updated:** [October 19, 2026, 5:08am UTC](https://discuss.rapid7.com/t/search-by-solution-low-hanging-fruit/57453 "2026-10-19T05:08:34Z")

</div>

Anyone have a SQL to find fixable asset by Solution? This may or may not turn out to be a low hanging fruit, but need to see if there is a good Return on Investment (ROI) for deploying by solution. Like when you see 1 …

---

## [CVE-2026-0322 InsightVM](https://discuss.rapid7.com/t/cve-2026-0322-insightvm/57504)

<div class="topic-metadata">

**Author:** [@LAN](https://discuss.rapid7.com/u/LAN)\
**Replies:** 1\
**Last updated:** [October 16, 2026, 7:00pm UTC](https://discuss.rapid7.com/t/cve-2026-0322-insightvm/57504 "2026-10-16T19:00:06Z")

</div>

Is InsightVM able to detect CVE-2026-0322 ?

---

## [InsightVM SQL Queries](https://discuss.rapid7.com/t/insightvm-sql-queries/57502)

<div class="topic-metadata">

**Author:** [@lhansen2](https://discuss.rapid7.com/u/lhansen2)\
**Replies:** 0\
**Last updated:** [October 15, 2026, 6:58am UTC](https://discuss.rapid7.com/t/insightvm-sql-queries/57502 "2026-10-15T06:58:07Z")

</div>

Hi Folks, Could I please ask for suggestions on: 1. Best place to learn SQL specifically for writing report queries in Rapid7, Using the reports on GitLab - I really like this one: “Authentication-Service-status.sql”…

---

## [How often do dynamic Remediation Projects update?](https://discuss.rapid7.com/t/how-often-do-dynamic-remediation-projects-update/57499)

<div class="topic-metadata">

**Author:** [@skadish](https://discuss.rapid7.com/u/skadish)\
**Replies:** 2\
**Last updated:** [October 14, 2026, 7:44pm UTC](https://discuss.rapid7.com/t/how-often-do-dynamic-remediation-projects-update/57499 "2026-10-14T19:44:01Z")

</div>

Dynamic Remediation Projects are supposed to add assets as they report it, correct? I created a project this morning for Patch Tuesday when only a subset of our laptops had checked in. Now it’s hours later, and the Pat…

---

## [Support for UniFi Edge Router as Firewall/UTM](https://discuss.rapid7.com/t/support-for-unifi-edge-router-as-firewall-utm/10819)

<div class="topic-metadata">

**Author:** [@karel\_holtzhausen](https://discuss.rapid7.com/u/karel_holtzhausen)\
**Replies:** 2\
**Last updated:** [October 14, 2026, 5:22pm UTC](https://discuss.rapid7.com/t/support-for-unifi-edge-router-as-firewall-utm/10819 "2026-10-14T17:22:55Z")

</div>

We have a few customers using UniFi Edge routers and controllers. Currently we adding the logs as custom syslogs but we want to request adding support for them for DHCP, DNS and firewall. Please let me know if I can pr…

---

## [Problem when tried to running scan engine](https://discuss.rapid7.com/t/problem-when-tried-to-running-scan-engine/57495)

<div class="topic-metadata">

**Author:** [@ioperation](https://discuss.rapid7.com/u/ioperation)\
**Replies:** 3\
**Last updated:** [October 14, 2026, 2:14pm UTC](https://discuss.rapid7.com/t/problem-when-tried-to-running-scan-engine/57495 "2026-10-14T14:14:34Z")

</div>

Here everyone i want to ask does anybody got trouble when the IVM scan engine are running with this error: I already whitelist the directory like this: But the error just keep showing up with nmap exit value is not…

---

## [PSA: Static Remediation Projects Not Operating as intended](https://discuss.rapid7.com/t/psa-static-remediation-projects-not-operating-as-intended/57498)

<div class="topic-metadata">

**Author:** [@dgree](https://discuss.rapid7.com/u/dgree)\
**Replies:** 0\
**Last updated:** [October 14, 2026, 1:46pm UTC](https://discuss.rapid7.com/t/psa-static-remediation-projects-not-operating-as-intended/57498 "2026-10-14T13:46:59Z")

</div>

If you’re not aware, you can create a “Static Remediation Project” from the results of setting up a Goal & SLA. The design of this is to move the vulnerabilities\\solutions over to a Remediation Project for people to work…

---

## [Reliable reporting on AI spawned investigations](https://discuss.rapid7.com/t/reliable-reporting-on-ai-spawned-investigations/57489)

<div class="topic-metadata">

**Author:** [@rcrawford\_cloud](https://discuss.rapid7.com/u/rcrawford_cloud)\
**Replies:** 2\
**Last updated:** [October 8, 2026, 3:38pm UTC](https://discuss.rapid7.com/t/reliable-reporting-on-ai-spawned-investigations/57489 "2026-10-08T15:38:03Z")

</div>

Has anyone discovered a reliable way of discovering and reporting on how many investigations generated in Rapid7 are due to Claude, Claude Code or Github Copilot running something? I’m sure we’re not unique in getting a…

---

## [Adding actors to the investigation path](https://discuss.rapid7.com/t/adding-actors-to-the-investigation-path/57486)

<div class="topic-metadata">

**Author:** [@Kelvic](https://discuss.rapid7.com/u/Kelvic)\
**Replies:** 1\
**Last updated:** [October 7, 2026, 3:11am UTC](https://discuss.rapid7.com/t/adding-actors-to-the-investigation-path/57486 "2026-10-07T03:11:46Z")

</div>

We’ve had a use case were we generate internal reports with the rapid7 API, super useful, but we recently had a need to report on actors involved in some alerts, for some busy months or reports that span within a big tim…

---

## [Integrating site times and issues](https://discuss.rapid7.com/t/integrating-site-times-and-issues/57485)

<div class="topic-metadata">

**Author:** [@bradpjaxx](https://discuss.rapid7.com/u/bradpjaxx)\
**Replies:** 0\
**Last updated:** [October 6, 2026, 8:20pm UTC](https://discuss.rapid7.com/t/integrating-site-times-and-issues/57485 "2026-10-06T20:20:27Z")

</div>

am i alone in this? we are having major issue with not only Agent Scans but normal Site Scans Taking Hours sometimes, 10+ hours to integrate after a scan “completes” in some instances we are seeing a site integrate but …

---

## [: Scans not dispatching to engines after 8.60 upgrade – deadlock found in thread dump (open case)](https://discuss.rapid7.com/t/scans-not-dispatching-to-engines-after-8-60-upgrade-deadlock-found-in-thread-dump-open-case/57475)

<div class="topic-metadata">

**Author:** [@aabhagoria-local](https://discuss.rapid7.com/u/aabhagoria-local)\
**Replies:** 1\
**Last updated:** [October 6, 2026, 8:16pm UTC](https://discuss.rapid7.com/t/scans-not-dispatching-to-engines-after-8-60-upgrade-deadlock-found-in-thread-dump-open-case/57475 "2026-10-06T20:16:03Z")

</div>

Hi everyone, I'm sharing this in case others have hit the same issue after upgrading to 8.60 or 8.61. We have an open case with Rapid7 support and are working with their team, but wanted to put this out here for visibil…

---

## [Analytics Portal Web API Browser Permission for Connecting to LAN](https://discuss.rapid7.com/t/analytics-portal-web-api-browser-permission-for-connecting-to-lan/57020)

<div class="topic-metadata">

**Author:** [@Lee](https://discuss.rapid7.com/u/Lee)\
**Replies:** 1\
**Last updated:** [October 6, 2026, 10:10am UTC](https://discuss.rapid7.com/t/analytics-portal-web-api-browser-permission-for-connecting-to-lan/57020 "2026-10-06T10:10:47Z")

</div>

New popup in Edge browser after logging into Rapid7, which I have not noticed before. I blocked it until I verify / learn more. This is relatively new behavior because browsers now enforce explicit user consent for …

---

## [Empty list for Privileged Admin Groups under IDR Settings](https://discuss.rapid7.com/t/empty-list-for-privileged-admin-groups-under-idr-settings/51335)

<div class="topic-metadata">

**Author:** [@akira.tiukichi](https://discuss.rapid7.com/u/akira.tiukichi)\
**Replies:** 4\
**Last updated:** [October 6, 2026, 8:02am UTC](https://discuss.rapid7.com/t/empty-list-for-privileged-admin-groups-under-idr-settings/51335 "2026-10-06T08:02:08Z")

</div>

We have noticed in our IDR settings \>\> Admin Groups are empty. When we try to Add Privileged Admin Group and no options available. But if we check “Users and Accounts” we do have several admin accounts. When digging furt…

---

## [Solutions: Apache Tomcat](https://discuss.rapid7.com/t/solutions-apache-tomcat/57483)

<div class="topic-metadata">

**Author:** [@lhansen2](https://discuss.rapid7.com/u/lhansen2)\
**Replies:** 0\
**Last updated:** [October 6, 2026, 3:13am UTC](https://discuss.rapid7.com/t/solutions-apache-tomcat/57483 "2026-10-06T03:13:14Z")

</div>

Hi Folks, Noted that there is ALOT of solutions listed for example - Apache Tomcat, is there any way to hide the superseded fixes? Thanks in Advance! Mainly use Power Query but can do a SQL report with plenty of caffe…

---

## [ManageEngine Endpoint Central documentation for only Patch Manager Plus](https://discuss.rapid7.com/t/manageengine-endpoint-central-documentation-for-only-patch-manager-plus/57482)

<div class="topic-metadata">

**Author:** [@chelminen](https://discuss.rapid7.com/u/chelminen)\
**Replies:** 1\
**Last updated:** [October 5, 2026, 2:45pm UTC](https://discuss.rapid7.com/t/manageengine-endpoint-central-documentation-for-only-patch-manager-plus/57482 "2026-10-05T14:45:23Z")

</div>

The documentation for the ManageEngine Endpoint Central connector for when you only have Patch Manger Plus is not real clear, the scopes do not work if you do not use Endpoint Central. After much trial and error I figur…

---

## [Apache2 / nginx log collection and analysis](https://discuss.rapid7.com/t/apache2-nginx-log-collection-and-analysis/43974)

<div class="topic-metadata">

**Author:** [@edehnert](https://discuss.rapid7.com/u/edehnert)\
**Replies:** 9\
**Last updated:** [October 2, 2026, 4:09pm UTC](https://discuss.rapid7.com/t/apache2-nginx-log-collection-and-analysis/43974 "2026-10-02T16:09:10Z")

</div>

Hello, we plan to ingest the access and error logs of Apache2 / nginx in IDR to alert unusual behavior. Unfortunately, there are no standard event sources for this. Does anyone have experience with these logs, custom …

---

## [Defender Tenant Allow/Block List Entries](https://discuss.rapid7.com/t/defender-tenant-allow-block-list-entries/57454)

<div class="topic-metadata">

**Author:** [@2tSecurity](https://discuss.rapid7.com/u/2tSecurity)\
**Replies:** 3\
**Last updated:** [October 2, 2026, 1:47am UTC](https://discuss.rapid7.com/t/defender-tenant-allow-block-list-entries/57454 "2026-10-02T01:47:01Z")

</div>

If there is one thing that I’ve been striving to automate it’s the blocking of malicious IOCs detected during phishing analysis by adding Tenant Allow/Block List entries. The issue that still keeps arising is the Microso…

---

## [Servicenow- Insightvm Remediation project - incidents created randomly](https://discuss.rapid7.com/t/servicenow-insightvm-remediation-project-incidents-created-randomly/57473)

<div class="topic-metadata">

**Author:** [@vviktor.nilsson](https://discuss.rapid7.com/u/vviktor.nilsson)\
**Replies:** 1\
**Last updated:** [October 1, 2026, 4:17pm UTC](https://discuss.rapid7.com/t/servicenow-insightvm-remediation-project-incidents-created-randomly/57473 "2026-10-01T16:17:00Z")

</div>

Hello Do anyone have issues with servicenow tickets being created randomly even though there has not been any vulnerability scan on the machines? it seem that Awaiting Verification status is not updated even though inc…

---

## [Assigning specific users access to Dashboards](https://discuss.rapid7.com/t/assigning-specific-users-access-to-dashboards/57476)

<div class="topic-metadata">

**Author:** [@jcarissimo](https://discuss.rapid7.com/u/jcarissimo)\
**Replies:** 1\
**Last updated:** [October 1, 2026, 4:14pm UTC](https://discuss.rapid7.com/t/assigning-specific-users-access-to-dashboards/57476 "2026-10-01T16:14:48Z")

</div>

Hi All, is anyone familiar with how/where I can assign specific users access to Dashboards that were created for a team in the Vulnerability Management module? Our in-house R7 InsightVM SME has left the company and I nee…

---

## [ICON - MTC Daily Email - Investigations, Alerts, Vulnerabilities (and SentinelOne)](https://discuss.rapid7.com/t/icon-mtc-daily-email-investigations-alerts-vulnerabilities-and-sentinelone/57477)

<div class="topic-metadata">

**Author:** [@zack\_jones](https://discuss.rapid7.com/u/zack_jones)\
**Replies:** 0\
**Last updated:** [October 1, 2026, 4:12pm UTC](https://discuss.rapid7.com/t/icon-mtc-daily-email-investigations-alerts-vulnerabilities-and-sentinelone/57477 "2026-10-01T16:12:04Z")

</div>

Figure’d I’d drop this here. Worked with someone that wanted a daily email that gives a 24 hour snapshot of new investigations, alerts, vulnerabilities, and for them they wanted SentinelOne agent status. At the end of t…

[Next page](https://discuss.rapid7.com/latest.md?page=1)
