Join the Conversation
- Find Answers
- :
- Apps & Add-ons
- :
- All Apps and Add-ons
- :
- All Apps and Add-ons
- :
- Re: Qualys VM App for Splunk Enterprise: Why are Q...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi All,
I have installed the latest version of Qualys VM App for Splunk enterprise, as well as the ta-qualyscloudplatform needed in order to bring the Aualys data into Splunk. I have successfully configured the App and the TA, but somehow the scripts that bring the data from the server listed under Settings->Data Inputs are not coming, and hence, I am not able to retrieve any data.
This was working fine with the previous Qualys app that I had on my Forwarder. Does anyone have a clue regarding this? I have followed the exact steps written in the documentation provided with the TA. Looking for a reply.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi All,
Got in touch with the app developer from Qualys, this app should be installed on the Indexer and then you would find the configurations as mentioned in the supporting doc. Still not sure why it won't work on the Heavy Forwarder since we have more than 2 indexers on our test and production servers and that would involve installing the app on every indexer.
I am in touch with the developer for this as well.
One more thing is to be very sure that the account that you're using is active and there is internet access on the server you;re configuring the app because that was the case with me.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi All,
Got in touch with the app developer from Qualys, this app should be installed on the Indexer and then you would find the configurations as mentioned in the supporting doc. Still not sure why it won't work on the Heavy Forwarder since we have more than 2 indexers on our test and production servers and that would involve installing the app on every indexer.
I am in touch with the developer for this as well.
One more thing is to be very sure that the account that you're using is active and there is internet access on the server you;re configuring the app because that was the case with me.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello rahul_jasrotia,
I got the same situation as you did.
Try the url directly "http://your splunk url/en-US/manager/launcher/data/inputs/qualys"
And you will find the page and you need to set them enable.
Hope it work for you.
Thanks,
Daiyu
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hello rahul_jasrotia,
I got the same situation as you did.
Try the url directly "http://your splunk url/en-US/manager/launcher/data/inputs/qualys"
And you will find the page and you need to set them enable.
Hope it work for you.
Thanks,
Daiyu
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi Lindaiyu,
Thanks yes i was able to see the scripts on the link mentioned by you.
But somehow they are not executing even after trying to make them run 4-5 times. Any idea what can be the reason for the same?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
you talk about the "interval"?
Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!
Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.
Index This | What travels the world but is also stuck in place?
Discover New Use Cases: Unlock Greater Value from Your Existing Splunk Data
Continue Your Journey: Join Session 2 of the Data Management and Federation Bootcamp ...
