Qualys Apps for Splunk Enterprise

Document created by Parag Baxi on Jun 23, 2014Last modified by Jeff Leggett on Oct 2, 2017
Version 58Show Document
  • View in full screen mode

See the attached PDF for the current documentation for the Qualys TA, VM & WAS Apps for Splunk.  Updated with notes for 1.2.3, additional troubleshooting steps, eventgen and how to setup for a Distributed Search Head Cluster environment.


Download from Splunkbase


Note: The new TA-QualysCloudPlatform is NOT compatible with the prior Qualys Splunk App 1.2.2 BETA formerly available.  If you are upgrading, you will need to completely remove the prior version from your Splunk Search Head before installing the new versions.


Notes:  If you re-install the TA, make sure you also delete checkpoint files from <splunk home>/var/lib/splunk/modinputs/qualys/<input name>


Also see the Splunk integration page.

3 people found this helpful