Enable the Data Feed
Return to Settings > Data Inputs > Qualys Technology Add-On Splunk.
You can view each of the Qualys metrics you selected. Make sure you enable these.
Once you enable data feeds, check the $SPLUNK_HOME/etc/apps/TA-QualysCloudPlatform/tmp directory on your search head to see the XML files begin to download.
Depending on the amount of data, it can take hours to days to download the first data set.
For all FIM data inputs, choose a date equal to or greater than 2017-01-01T00:00:00.000Z.
Related Topics
Search Your Qualys Data in Splunk