See the attached PDF for the current documentation for the Qualys TA, VM & WAS Apps for Splunk. Updated with notes for 1.2.3, additional troubleshooting steps, eventgen and how to setup for a Distributed Search Head Cluster environment.
Download from Splunkbase
- Qualys Technology Add-on (TA) for Splunk: Synchronize Qualys data into Splunk
- Qualys VM App for Splunk Enterprise: Your VM data visualized in Splunk
- Qualys WAS App for Splunk Enterprise: Your WAS data visualized in Splunk
Note: The new TA-QualysCloudPlatform is NOT compatible with the prior Qualys Splunk App 1.2.2 BETA formerly available. If you are upgrading, you will need to completely remove the prior version from your Splunk Search Head before installing the new versions.
Notes: If you re-install the TA, make sure you also delete checkpoint files from <splunk home>/var/lib/splunk/modinputs/qualys/<input name>
Also see the Splunk integration page.