Qualys dashboards

[Dayalss]

Hi,

We are using a Splunk hybrid environment , with Splunk HF on Splunk enterprise , indexers and search heads  on Splunk Cloud.

I have installed and configured the Qualys TA addon on Splunk HF and ingesting the data to Splunk Cloud.

But the Qualys apps are supported only on Splunk Enterprise and not Splunk Cloud. Is there a way to get the dashboards on Splunk Cloud?

Can someone please help.

[isoutamo]

Hi

There seems to be quite many Qualys apps on splunkbase!

In generally there are two options:

1. Ask that Qualys update and "certify" their apps to work also on Splunk Cloud.
2. Do that by yourself (check their license, if this is real option or not)
   1. Port and validate those by yourself
   2. Take those dashboards which you are needing and create your own  app based on those

And last option is just create your own app based on your needs.

r. Ismo

[Dayalss]

Hi Ismo,

I'm not sure on how to do that.

Can you please guide me or provide any doc link.

Thank you

[isoutamo]

Unfortunately I haven't have those logs & apps on my test environment to guided you further with them. But you can read e.g. from https://docs.splunk.com/Documentation/SplunkCloud/latest/Viz/WebFramework
There are another guides too, just look those from google, bing or what ever search engine you are using.