All Apps and Add-ons
×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question

differentiating between scap and vuln scan in tenable app

murhammr
Path Finder
‎07-13-2018 08:19 AM

we configured the nessus TA via the web interface to extract data from Security Center.

[xxx]
batch_size = 10000
data = sc_vulnerability
index = xxx

i see vulnerability scans and SCAP scans, all under sourcetype=tenable:sc:vuln. what is the best way to differentiate between these 2 types of scan results? My best guess right now is pluginName=SCAP* to identify SCAP scan results but I am not sure this is correct.

0 Karma
Reply
Get Updates on the Splunk Community!

Splunk at Cisco Live 2025: Learning, Innovation, and a Little Bit of Mr. Brightside

Pack your bags (and maybe your dancing shoes)—Cisco Live is heading to San Diego, June 8–12, 2025, and Splunk ...

Splunk App Dev Community Updates – What’s New and What’s Next

Welcome to your go-to roundup of everything happening in the Splunk App Dev Community! Whether you're building ...

The Latest Cisco Integrations With Splunk Platform!

Join us for an exciting tech talk where we’ll explore the latest integrations in Cisco + Splunk! We’ve ...