https://github.com/darvid/nessusbeat
A Beat that monitors a local Nessus reports directory and outputs scan results to Elasticsearch or Logstash.
https://github.com/darvid/nessusbeat
beat beats elasticbeats elasticsearch logstash nessus vulnerability-assessment vulnerability-scanner vulnerability-scanning
Last synced: about 1 month ago
JSON representation
A Beat that monitors a local Nessus reports directory and outputs scan results to Elasticsearch or Logstash.
- Host: GitHub
- URL: https://github.com/darvid/nessusbeat
- Owner: darvid
- License: other
- Created: 2017-06-23T19:19:55.000Z (almost 8 years ago)
- Default Branch: master
- Last Pushed: 2017-10-01T21:51:58.000Z (over 7 years ago)
- Last Synced: 2025-03-31T14:11:24.508Z (3 months ago)
- Topics: beat, beats, elasticbeats, elasticsearch, logstash, nessus, vulnerability-assessment, vulnerability-scanner, vulnerability-scanning
- Language: Go
- Size: 13 MB
- Stars: 31
- Watchers: 3
- Forks: 14
- Open Issues: 3
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
Awesome Lists containing this project
README
# Nessusbeat
Nessusbeat provides a [Beat](https://www.elastic.co/products/beats) that
monitors a local
[Nessus](https://www.tenable.com/products/nessus-vulnerability-scanner)
installation's reports directory and exports, parses, and outputs scan
results to supported Beat outputs.
## Getting Started with Nessusbeat
### Requirements
* [Golang](https://golang.org/dl/) 1.7
### Configuration
```yaml
nessusbeat:
report_path: /opt/nessus/var/nessus/users/admin/reports
#cacert_path:
#api_url:
#api_username:
#api_password:
```
### Build
To build the binary for Nessusbeat run the command below.
This will generate a binary in the same directory with the name
nessusbeat.
```
make
```
### Run
To run Nessusbeat with debugging output enabled, run:
```
./nessusbeat -c nessusbeat.yml -e -d "*"
```
To run on startup, see the [init-scripts](https://github.com/darvid/nessusbeat/tree/master/init-scripts)
folder for example configuration files for each init system.
### Roadmap
- [ ] Add option to poll remote Nessus and SecurityCenter
- [ ] Add ability to filter scans
- [ ] Support authentication via API key and secret