Splunk Add-on for Nessus: Why am I getting errors "Proxy username is empty" and "Failed to get stanza Nessus Splunk Integration by data_input manager."

[sumansah]

Hi All,

I am trying to integrate Nessus with Splunk. Performed all the mentioned steps, however, unable to find any logs from Nessus.
Attaching error logs from C:\Program Files\Splunk\var\log\splunk\ta_nessus.log

Required expert advice to resolve this issue.

2016-05-17 10:17:33,782 INFO pid=9312 tid=MainThread file=nessus.py:main:260 | Start nessus TA
2016-05-17 10:17:34,451 INFO pid=9312 tid=MainThread file=nessus_config.py:get_nessus_conf:80 | Try to get encrypted proxy username & password
2016-05-17 10:17:34,451 INFO pid=9312 tid=MainThread file=nessus_config.py:update_nessus_conf:66 | Update nessus.conf
2016-05-17 10:17:34,451 INFO pid=9312 tid=MainThread file=nessus_config.py:_encrypt_nessus_conf:198 | Encrypt the proxy username & password
2016-05-17 10:17:34,453 INFO pid=9312 tid=MainThread file=nessus_config.py:_encrypt_nessus_conf:206 | Proxy username is empty. Try to delete the encrypted proxy username & password
2016-05-17 10:17:34,572 INFO pid=9312 tid=MainThread file=nessus.py:get_nessus_modinput_configs:142 | Set loglevel to WARN
2016-05-17 10:17:34,957 ERROR pid=9312 tid=MainThread file=nessus_config.py:check_conf_mgr_result:26 | Failed to get stanza Nessus Splunk Integration by data_input manager.
2016-05-17 10:17:34,957 ERROR pid=9312 tid=MainThread file=nessus.py:get_nessus_modinput_configs:156 | Failed to setup config for nessus TA: Failed to get stanza Nessus Splunk Integration by data_input manager.
2016-05-17 10:17:34,960 ERROR pid=9312 tid=MainThread file=nessus.py:get_nessus_modinput_configs:157 | Traceback (most recent call last):
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py", line 147, in get_nessus_modinput_configs
    input_conf = config.get_data_input(input_name)
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 177, in get_data_input
    input_stanza = self._get_raw_stanza(name, stanza_type="data_input")
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 266, in _get_raw_stanza
    "Failed to get stanza {} by {} manager.".format(stanza_name, stanza_type))
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 27, in check_conf_mgr_result
    raise NessusConfigException(msg)
NessusConfigException: Failed to get stanza Nessus Splunk Integration by data_input manager.

2016-05-17 21:02:58,503 INFO pid=5740 tid=MainThread file=nessus.py:main:260 | Start nessus TA
2016-05-17 21:03:00,875 INFO pid=5740 tid=MainThread file=nessus_config.py:get_nessus_conf:80 | Try to get encrypted proxy username & password
2016-05-17 21:03:00,875 INFO pid=5740 tid=MainThread file=nessus_config.py:update_nessus_conf:66 | Update nessus.conf
2016-05-17 21:03:00,875 INFO pid=5740 tid=MainThread file=nessus_config.py:_encrypt_nessus_conf:198 | Encrypt the proxy username & password
2016-05-17 21:03:00,875 INFO pid=5740 tid=MainThread file=nessus_config.py:_encrypt_nessus_conf:206 | Proxy username is empty. Try to delete the encrypted proxy username & password
2016-05-17 21:03:00,963 INFO pid=5740 tid=MainThread file=nessus.py:get_nessus_modinput_configs:142 | Set loglevel to WARN
2016-05-17 21:03:01,989 ERROR pid=5740 tid=MainThread file=nessus_config.py:check_conf_mgr_result:26 | Failed to get stanza Nessus Splunk Integration by data_input manager.
2016-05-17 21:03:01,989 ERROR pid=5740 tid=MainThread file=nessus.py:get_nessus_modinput_configs:156 | Failed to setup config for nessus TA: Failed to get stanza Nessus Splunk Integration by data_input manager.
2016-05-17 21:03:01,990 ERROR pid=5740 tid=MainThread file=nessus.py:get_nessus_modinput_configs:157 | Traceback (most recent call last):
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py", line 147, in get_nessus_modinput_configs
    input_conf = config.get_data_input(input_name)
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 177, in get_data_input
    input_stanza = self._get_raw_stanza(name, stanza_type="data_input")
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 266, in _get_raw_stanza
    "Failed to get stanza {} by {} manager.".format(stanza_name, stanza_type))
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 27, in check_conf_mgr_result
    raise NessusConfigException(msg)
NessusConfigException: Failed to get stanza Nessus Splunk Integration by data_input manager.

2016-05-17 21:05:26,095 INFO pid=4880 tid=MainThread file=nessus.py:main:260 | Start nessus TA
2016-05-17 21:05:28,772 INFO pid=4880 tid=MainThread file=nessus_config.py:get_nessus_conf:80 | Try to get encrypted proxy username & password
2016-05-17 21:05:28,772 INFO pid=4880 tid=MainThread file=nessus_config.py:update_nessus_conf:66 | Update nessus.conf
2016-05-17 21:05:28,772 INFO pid=4880 tid=MainThread file=nessus_config.py:_encrypt_nessus_conf:198 | Encrypt the proxy username & password
2016-05-17 21:05:28,772 INFO pid=4880 tid=MainThread file=nessus_config.py:_encrypt_nessus_conf:206 | Proxy username is empty. Try to delete the encrypted proxy username & password
2016-05-17 21:05:28,881 INFO pid=4880 tid=MainThread file=nessus.py:get_nessus_modinput_configs:142 | Set loglevel to WARN
2016-05-17 21:05:29,733 ERROR pid=4880 tid=MainThread file=nessus_config.py:check_conf_mgr_result:26 | Failed to get stanza Nessus Splunk Integration by data_input manager.
2016-05-17 21:05:29,733 ERROR pid=4880 tid=MainThread file=nessus.py:get_nessus_modinput_configs:156 | Failed to setup config for nessus TA: Failed to get stanza Nessus Splunk Integration by data_input manager.
2016-05-17 21:05:29,786 ERROR pid=4880 tid=MainThread file=nessus.py:get_nessus_modinput_configs:157 | Traceback (most recent call last):
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py", line 147, in get_nessus_modinput_configs
    input_conf = config.get_data_input(input_name)
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 177, in get_data_input
    input_stanza = self._get_raw_stanza(name, stanza_type="data_input")
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 266, in _get_raw_stanza
    "Failed to get stanza {} by {} manager.".format(stanza_name, stanza_type))
  File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 27, in check_conf_mgr_result
    raise NessusConfigException(msg)
NessusConfigException: Failed to get stanza Nessus Splunk Integration by data_input manager.

[raybowden]

I can potentially help with one of the issues, I was also getting "Proxy username is empty" in the ta_nessus.log.

I thought this was strange because I remember putting the Access and Secret Keys in, but when I went to check the settings in edit, I could see that they were missing, so I put them back in.

I think if you go into the Inputs section and go to Edit as an action, you will have to fill in the Access/Secret key each time, it doesn't remember them.