Skip to content

A Beat that monitors a local Nessus reports directory and outputs scan results to Elasticsearch or Logstash.

License

Notifications You must be signed in to change notification settings

darvid/nessusbeat

Repository files navigation

Nessusbeat

Nessusbeat provides a Beat that monitors a local Nessus installation's reports directory and exports, parses, and outputs scan results to supported Beat outputs.

Getting Started with Nessusbeat

Requirements

Configuration

nessusbeat:
  report_path: /opt/nessus/var/nessus/users/admin/reports
  #cacert_path:
  #api_url:
  #api_username:
  #api_password:

Build

To build the binary for Nessusbeat run the command below. This will generate a binary in the same directory with the name nessusbeat.

make

Run

To run Nessusbeat with debugging output enabled, run:

./nessusbeat -c nessusbeat.yml -e -d "*"

To run on startup, see the init-scripts folder for example configuration files for each init system.

Roadmap

  • Add option to poll remote Nessus and SecurityCenter
  • Add ability to filter scans
  • Support authentication via API key and secret