All Apps and Add-ons

Splunk nessus add-on does not seems to fail to get plugins information

restevan
New Member

Hi,

I've installed the add-on and configured the 2 data-inputs, one for the scans and the other for the plugins.
For scans everything works fine, I get the results without problems.
But for plugins it seems to be failing.
I get all the time the following error:

11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py"" Traceback (most recent call last):
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""   File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py", line 266, in <module>
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""     main()
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""   File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py", line 261, in main
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""     run()
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""   File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py", line 170, in run
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""     nessus_conf = get_nessus_modinput_configs(modinputs)
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""   File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py", line 147, in get_nessus_modinput_configs
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""     input_conf = config.get_data_input(input_name)
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""   File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 177, in get_data_input
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""     input_stanza = self._get_raw_stanza(name, stanza_type="data_input")
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""   File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 266, in _get_raw_stanza
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""     "Failed to get stanza {} by {} manager.".format(stanza_name, stanza_type))
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""   File "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus_config.py", line 27, in check_conf_mgr_result
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py""     raise NessusConfigException(msg)
11-06-2015 07:41:44.036 +0100 ERROR ExecProcessor - message from "python "C:\Program Files\Splunk\etc\apps\Splunk_TA_nessus\bin\nessus.py"" nessus_config.NessusConfigException: Failed to get stanza Nessus plugins by data_input manager.

Is there something I've forgot to configure?
Could anyone help me?

Thanks,

R.

0 Karma

darrend
Path Finder

Hi

I have found my problem with this, i am not sure if it is the same as yours.

I was unable to collect scan results for scans that were not created under the same user that i was connecting to Nessus from Splunk with, as soon as i created and ran a network scan under the user that i was connecting from Splunk with it worked fine.

Thanks
Darren

0 Karma

darrend
Path Finder

Did you manage to solve this?

I have the same error, but exactly the opposite way around, i have plugin information, but cannot get the scan data to execute without python errors similar to the ones you have included.

0 Karma

jcoates_splunk
Splunk Employee
Splunk Employee

you should file a support ticket so that we can see a diag.

0 Karma

restevan
New Member

Hi,
I'm using Splunk Enterprise in trial mode for the moment because I'm evalutating the possibility to analyze NEssus results and draw dashboard on Splunk.
Can I file anyway a support ticket?
R.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...