QualysVM deployed without error but no data visible

%3CLINGO-SUB%20id%3D%22lingo-sub-1627264%22%20slang%3D%22en-US%22%3EQualysVM%20deployed%20without%20error%20but%20no%20data%20visible%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1627264%22%20slang%3D%22en-US%22%3E%3CP%3EWe%20deployed%20the%20new%20Qualys%20VM%20data%20connector%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Col_Sanders_0-1599035220234.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F216026i617E8B3F7D61EC9F%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Col_Sanders_0-1599035220234.png%22%20alt%3D%22Col_Sanders_0-1599035220234.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3Efollowing%20the%20process%20on%20the%20connector%20page%20using%3A%3C%2FP%3E%3CP%3E%3CSPAN%3E%22Option%201%20-%20Azure%20Resource%20Manager%20(ARM)%20Template%22%3C%2FSPAN%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20preRequisites%20are%20met%20and%20the%20deployment%20log%20appears%20to%20show%20success%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Col_Sanders_1-1599035532533.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F216027i3F0F52B2E11F2B47%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22Col_Sanders_1-1599035532533.png%22%20alt%3D%22Col_Sanders_1-1599035532533.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EYet%20in%20Sentinel%20it%20shows%20%22Not%20Connected%22%20and%20no%20value%20for%20%22Last%20Log%20received%22%20and%20if%20we%20look%20through%2Fquery%20the%20tables%20for%20%22QualysHostDetection_CL%22%20we%20find%20nothing.%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20Function%20App%20we%20can%20see%20(attached)%20the%20QualysVM%20Function%20App%20is%20%22Running%22%3C%2FP%3E%3CP%3EThe%20only%20hint%20of%20a%20possible%20anomaly%20we%20can%20see%20is%20in%20the%20Functions%20tab%20for%20that%20Function%20App%20it%20displays%20the%20(attached)%20warning%20that%20the%20app%20is%20in%20RO%20mode%20but%20it%20shows%20as%20executing%20successfully%20each%20five%20minutes%20with%20no%20Fails.%26nbsp%3B%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20do%20we%20go%20about%20diagnosing%20this%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

We deployed the new Qualys VM data connector 

Col_Sanders_0-1599035220234.png

following the process on the connector page using:

"Option 1 - Azure Resource Manager (ARM) Template" 

The preRequisites are met and the deployment log appears to show success

Col_Sanders_1-1599035532533.png

Yet in Sentinel it shows "Not Connected" and no value for "Last Log received" and if we look through/query the tables for "QualysHostDetection_CL" we find nothing. 

In Function App we can see (attached) the QualysVM Function App is "Running"

The only hint of a possible anomaly we can see is in the Functions tab for that Function App it displays the (attached) warning that the app is in RO mode but it shows as executing successfully each five minutes with no Fails.  

 

How do we go about diagnosing this?

 

 

1 Reply
Same problem. Did you solve it?