I'm looking to understand the best approach for trending data and show changes week over week.
Let me explain: we have some tools that assess our environment for vulnerability, compliance, etc. Each week we have a different status for each asset: vulnerabilities get fixed, new vulnerabilities are raised, some become 'overdue', etc.
I could store my KPIs in a new table/QVD, but if I store the KPI alone, I'll miss all the ability to filter by region, asset, IP, category, etc.
How can I architect this cumulative data for the situation above?
Some fields for reference:
AssetID
Region
IP_address
HostName
vulnerability_title
Category
Date_Found
Date_published
Severity
CVSS_Score
Operating_System
KPIs could be:
% of critical vulnerabilities (critical / total vulnerabilities)