Got below error while Entering Credential for the first time for Qualys Technology Add-on in Splunk:
Encountered the following error while trying to update: Error while posting to url=/servicesNS/nobody/TA-QualysCloudPlatform/qualys/qualys_configure/setupentity
I am Answering my question myself.
there are two things we need to check.
1. firewall, Is the splunk able to connect to Qualys cloud.
2. make sure not to use http:// in the proxy entry.
I sorted both of them and the first time credentials worked.
I am Answering my question myself.
there are two things we need to check.
1. firewall, Is the splunk able to connect to Qualys cloud.
2. make sure not to use http:// in the proxy entry.
I sorted both of them and the first time credentials worked.
The error you're seeing is usually encountered when trying to update credentials that are already set. The solution is to delete TA-QualysCloudPlatform/local/passwords.conf file and restart your Splunk. Then set your new credentials.
Please let me know whether this solves your problem or not.
It's been a while but btw I get here. The password.conf is located at this folder in the HF or where you installed the TA:
/opt/splunk/etc/apps/TA-QualysCloudPlatform/local
