I am trying to upload Nessus data into Splunk by uploading the .nessus / CSV or html file. Using the API to connect Splunk to Nessus is no option in this specific case. I can't get the fields parsed. The Splunk_TA_nessus app seems to solely work with API and not by manually uploading the Nessus-reports/files. I read that the .nessus file should be copied to the spools directory if I want to manually upload it. But that does not work either - no upload nor parsing. I even changed the inputs.conf.windows srcdir to the spool directory.
Does anybody have an idea - how to accomplish a manual nessus upload and parsing the fields?
Hi, I am not sure if this directly answers your question, but perhaps it could be of some help. I recently developed a free open-source application called TenaPull, which processes Nessus data for ingestion by Splunk. There is more information here: