Workload Scan Log - Wiz Docs PDF

01/04/2025, 18:19 Workload Scan Log | Wiz Docs Workload Scan Log The workload scan log records all workload and data scans performed by Wiz in your tenant in the last 14 days. Use the scan log to view scan statuses, track down the types...

01/04/2025, 18:19 Workload Scan Log | Wiz Docs Workload Scan Log The workload scan log records all workload and data scans performed by Wiz in your tenant in the last 14 days. Use the scan log to view scan statuses, track down the types of scans, identify scanning gaps, and more. Only scans of top-level resources are recorded. For example, the scanning of a VM running multiple containers will generate only one record, that of the VM. From the Settings > Workload Scan Log ↗ page, you can: Filter log entries by Resource Name , Resource Region, Resource Type, Scan Time, Status, Trigger Source , and more. View widgets and add them to boards Investigate recent scans of a specific resource Export the first 10,000 entries from the log by clicking Save as... > CSV File at the top. Export scan logs using the Wiz API "Deleted resource" means that by the time of viewing the page, the resource no longer exists. This filter can be used to identify scans initiated by Wiz CLI. View widgets and add them to boards The Workload Scan Log page presents three widgets at the top. These widgets are updated according to the chosen timeframe and any other applied filters and are meant to help visualize the data and research cost aspects in your environment. When you add widgets to boards, any filters that have been applied are maintained. To add one of the page widgets to any of your custom boards: https://docs.wiz.io/docs/workload-scan-log-settings 1/3 01/04/2025, 18:19 Workload Scan Log | Wiz Docs 1. Select a widget and click at its top right corner. 2. (Optional) Change the name of the widget that is to be added to the custom board. 3. Choose the board to save the widget to. 4. Click Add to board. Investigate recent scans of a specific resource 1. At the top, filter for a specific resource by name and/or external ID. 2. If the Status column shows failed or skipped scans, add the status message column by clicking Table Options > Status Message. 3. Hover over the Status Message to learn more about why the scan may have failed or been skipped. Export scan logs using the Wiz API You can use the Wiz API to export up to 10,000 entries: 1. In Wiz, navigate to the Profile > Developer > API Explorer ↗. 2. Clear the contents from the two panes on the left-side (the main query pane and the query variables pane). 3. In the main query pane, copy and paste the following: 1 query WorkloadScanLogTableExport($filterBy: ResourceScanResultFilters, $limit: Int!) { 2 export: resourceScanResults(filterBy: $filterBy) { 3 exportUrl(limit: $limit) 4 } 5 } 4. In the query variables pane, copy and paste the following: 1 { 2 "filterBy": { 3 "resource": {}, 4 "modules": {} 5 }, 6 "limit": 10000 7 } https://docs.wiz.io/docs/workload-scan-log-settings 2/3 01/04/2025, 18:19 Workload Scan Log | Wiz Docs 5. At the top, click Execute Query. 6. From the results pane on the right, copy and paste the exportURL to your web browser and download the workload scan log entries. https://docs.wiz.io/docs/workload-scan-log-settings 3/3