Qualys App for Splunk Enterprise: Vulnerability data download is not working

[shaileshmali]

Has anybody been able to make this app work. my authentication works , i get kb downloaded , but vulnerability data download does not work.

Even though api access was enabled vulnerability data download was not working , Qualys support did fix this issue , API error has stopped but still vulnerability download is not working. i am still following up with Qualys to check if still they need to make any config changes on their side.

[fulldanad]

Yes, it finally worked for me.

Initially the default cron time was never used.

So I changed it for a number of seconds and it does now work properly.

Check this parameter in :
- Data Input
- Scripts
- $SPLUNK_HOME/etc/apps/qualys_splunk_app/bin/qualys_detection_logger.sh

Of yourse, you also have need to have the feature api enabled by Qualys which come with a price...

Regards

[akumarkh]

I am also facing the same issue. Any clue please?

[fulldanad]

same here, any news on your side ?