Morning all,
since replacing the certs on our Nessus box with self signed ones, we're getting a weird error. Initially the issue was down to not having added the chain into the cacerts.txt file but, having fixed that, we're now getting another error...
2018-07-18 09:39:45,703 INFO pid=2308 tid=MainThread file=nessus.py:main:264 | Start nessus TA
2018-07-18 09:39:45,769 ERROR pid=2308 tid=MainThread file=nessus.py:get_nessus_modinput_configs:160 | Failed to setup config for nessus TA: 'NoneType' object is not iterable
2018-07-18 09:39:45,770 ERROR pid=2308 tid=MainThread file=nessus.py:get_nessus_modinput_configs:161 | Traceback (most recent call last):
File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py", line 140, in get_nessus_modinput_configs
config.remove_expired_ckpt()
File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 149, in remove_expired_ckpt
for data_input in inputs)
TypeError: 'NoneType' object is not iterable
It's been broken for a while, so it's not certain that this is down to the change in the certs. The app has updated at least once in the time period.
Details....
Splunk_TA_nessus v5.1.4
Nessus Professional Version 7 Version7.1.2 (#118) WINDOWS
inputs.conf...
[nessus://Nessus]
access_key = ********
batch_size = 100000
index = nessus
interval = 3600
metric = nessus_scan
secret_key = ********
start_date = 2018/01/01
url = https://our nessus server:8334
Any ideas gratefully received.
Tom
