All Apps and Add-ons

Qualys integration with Splunk 7.0.3

New Member

Help properly connect the Qualys vulnerability scanner to the Splunk.
I can not understand on what servers I need to install a technical addon - Qualys Technology Add-on for Splunk ver. 1.3.2
My server architecture is a Splunk:
- Server SH
- Server HF
- Server Indexer - 1 (cluster node)
- Server Indexer - 2 (cluster node)
- Cluster master

With the technical addon are the following intuitions:
- host_detection
- knowledge_base
- policy_posture_info
- was_findings

And also in the most addon (Qualys Technology Add (TA)) there is a config configurable connection by AIPI to cloudy Qualys.
Where is this connection configured ?
If I collect data via HF, then this addon is configured only for HF or also for SH ?

0 Karma
Get Updates on the Splunk Community!

New Cloud Intrusion Detection System Add-on for Splunk

In July 2022 Splunk released the Cloud IDS add-on which expanded Splunk capabilities in security and data ...

Happy CX Day to our Community Superheroes!

Happy 10th Birthday CX Day!What is CX Day? It’s a global celebration recognizing innovation and success in the ...

Check out This Month’s Brand new Splunk Lantern Articles

Splunk Lantern is a customer success center providing advice from Splunk experts on valuable data insights, ...