All Apps and Add-ons

Qualys TA Add-on to Splunk. PID hits an error & is not recovering.

PavithraSarvin
Loves-to-Learn Lots

 PID hits an error & is not recovering & Add-On cannot start inputs as previous ones running.

The problem is that when the process running the data input hits an error, it's not handling it or recovering.  The addon can't start the input again, because the input reports that the PID is already running.

Add-on is also upgraded to version: Qualys Technology Add-on (TA) for Splunk | Splunkbase

Version: 1.11.4

data inputs having issues: host detection, policy_posture_info

Please suggest to fix the issue.

 

TA-QualysCloudPlatform: 2024-05-15 01:10:52 PID=1889491 [MainThread] ERROR: Another instance of policy_posture_info is already running with PID 2*****. I am exiting.

TA-QualysCloudPlatform: 2024-05-15 01:10:52 PID=1889491 [MainThread] INFO: Earlier Running PID: 2*****

 

 

 

 

Labels (2)
0 Karma

deepsec
New Member

We are also facing the same situation. Any luck on how to resolve this?

Thanks.

0 Karma
Get Updates on the Splunk Community!

Splunk Search APIを使えば調査過程が残せます

   このゲストブログは、JCOM株式会社の情報セキュリティ本部・専任部長である渡辺慎太郎氏によって執筆されました。 Note: This article is published in both Japanese ...

Integrating Splunk Search API and Quarto to Create Reproducible Investigation ...

 Splunk is More Than Just the Web Console For Digital Forensics and Incident Response (DFIR) practitioners, ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...