All Apps and Add-ons

Qualys logs don't arrive at Splunk enterprise

erlindemberg
Explorer

Hello,

I have Qualys on my Splunk Enterprise installation, but since 08/11/2019 the logs have stopped coming.

I changed the data in the SET UP of Qualys in Splunk APP, with proxy for direct output to the internet without restriction or user attention. I also changed the Qualys user settings to a fully admin USER within the QUalys API, but even so the logs that previously arrived from sourcetype = qualys: * are no longer received.

Here, I use the APP VM QUALYS and APP WAS QUALYS.

0 Karma
Get Updates on the Splunk Community!

Extending Observability Content to Splunk Cloud

Watch Now!   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to leverage ...

More Control Over Your Monitoring Costs with Archived Metrics!

What if there was a way you could keep all the metrics data you need while saving on storage costs?This is now ...

New in Observability Cloud - Explicit Bucket Histograms

Splunk introduces native support for histograms as a metric data type within Observability Cloud with Explicit ...