Running the Splunk_TA_nessus (5.1.1) against security center works fine, and collects event data correctly, however it frequently (approx. weekly) stalls, and requires that either the input is disabled/enabled or the HF is restarted.
It appears the python process is still running, but it just stops trying to connect to SC.
This feels like the script is getting stuck somewhere. Wondering if anyone else has experienced the same?
↧