Why are 2016 inputs to qualys_kb.csv not listing in splunk search?

paulnshelly_200 — Tue, 29 Sep 2020 08:39:27 GMT

I was looking at my active vulnerabilities which I count by title and was missing 5 that the qualys scanner showed as open. When I searched for the QID in splunk_kb_lookup I had no results. When I looked in the csv file on the server the QID is showing up. It appears that this started happening for inputs starting in 2016.

Any ideas?

Thanks.

Paul

Re: Why are 2016 inputs to qualys_kb.csv not listing in splunk search?

paulnshelly_200 — Thu, 04 Feb 2016 19:00:33 GMT

It was a stupid user mistake. I had turned off my inputs on the search heads so the kbpopulator was not updating.

Thanks.

topic Why are 2016 inputs to qualys_kb.csv not listing in splunk search? in Splunk Search

Why are 2016 inputs to qualys_kb.csv not listing in splunk search?

Re: Why are 2016 inputs to qualys_kb.csv not listing in splunk search?