Splunk for Asset Discovery: Why am I Receiving out of date data?

[harry056]

Hello,

I have installed Splunk discovery app and set the nmap command as

C:\Program Files\Splunk\etc\apps\asset_discovery\bin\nmap.cmd  -A -O -t 172.17.0.0/16  10.2.237.0/24

I am getting data for 2017, not current data 29-09-2019.

Please do needful
Thanks
Lalit

[diogofgm]

You are missing a -t before the 2nd CIDR notation

Also check the date on you splunk box

[harry056]

data is 2019 ,

Please help me , how to do
Notes on the Windows scripted input, nmap.cmd (which calls nmap.vbs): You must create the file bin\nmap.path which contains the full path to your nmap.exe (i.e. C:\Program Files\Nmap\nmap.exe)

not getting how to do this

Thanks
Lalit

[harry056]

Please help

[RMcCurdyDOTcom]

I used XtremeNmapParser to convert the xml to JSON and then used HEC to send it all to Spunk!

https://github.com/xtormin/XtremeNmapParser/issues/1 Z