All Apps and Add-ons

Qualys Technology Add-on (TA) for Splunk: Files download, xml is in tmp, but don't show up in index

TonyLeeVT
Builder

Hello, we are using the latest Qualys Technology Add-on (TA) for Splunk (TA-QualysCloudPlatform version 1.3.2) on a Heavy Forwarder. It seems to download the information via the Qualys API and write them as .xml files to the tmp directory, but those files are just sitting there and nothing shows up in the index. Is there another script on a different cron schedule that process the files to add them to the proper index? Thanks in advance.

Get Updates on the Splunk Community!

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Accelerating Observability as Code with the Splunk AI Assistant

We’ve seen in previous posts what Observability as Code (OaC) is and how it’s now essential for managing ...