Why are 2016 inputs to qualys_kb.csv not listing in splunk search?

[paulnshelly_200]

I was looking at my active vulnerabilities which I count by title and was missing 5 that the qualys scanner showed as open. When I searched for the QID in splunk_kb_lookup I had no results. When I looked in the csv file on the server the QID is showing up. It appears that this started happening for inputs starting in 2016.

Any ideas?

Thanks.

Paul

[paulnshelly_200 · Accepted solution]

It was a stupid user mistake. I had turned off my inputs on the search heads so the kbpopulator was not updating.

Thanks.