login to Nessus before each scan export, rather than once at startup

darvid · Jul 27, 2017 · 262e9e5 · 262e9e5
1 parent 66cdaaf
commit 262e9e5
Show file tree

Hide file tree

Showing 4 changed files with 14 additions and 11 deletions.
diff --git a/_meta/beat.yml b/_meta/beat.yml
@@ -4,9 +4,9 @@
 
 nessusbeat:
   report_path: /opt/nessus/var/nessus/users/admin/reports
-  # Path to root certificates.
   #cacert_path:
-  # The Nessus API URL.
   #api_url:
   #api_username:
   #api_password:
+
+name: nessusbeat
diff --git a/beater/nessusbeat.go b/beater/nessusbeat.go
@@ -106,15 +106,6 @@ func (bt *Nessusbeat) Run(b *beat.Beat) error {
 	bt.client = b.Publisher.Connect()
 	results := make(chan []byte)
 
-	nessus, err := bt.NewConnection()
-	if err != nil {
-		logp.WTF(err.Error())
-	}
-	if err = bt.Login(*nessus); err != nil {
-		logp.WTF(err.Error())
-	}
-	defer (*nessus).Logout()
-
 	go func() {
 		for {
 			select {
@@ -127,6 +118,14 @@ func (bt *Nessusbeat) Run(b *beat.Beat) error {
 					var csv []byte
 					err = backoff.RetryNotify(
 						func() error {
+							nessus, err := bt.NewConnection()
+							if err != nil {
+								logp.WTF(err.Error())
+							}
+							if err = bt.Login(*nessus); err != nil {
+								logp.WTF(err.Error())
+							}
+							defer (*nessus).Logout()
 							csv, err = bt.ExportScanCSV(*nessus, uuid)
 							return err
 						},

diff --git a/nessusbeat.full.yml b/nessusbeat.full.yml
@@ -9,6 +9,8 @@ nessusbeat:
   #api_username:
   #api_password:
 
+name: nessusbeat
+
 #================================ General ======================================
 
 # The name of the shipper that publishes the network data. It can be used to group

diff --git a/nessusbeat.yml b/nessusbeat.yml
@@ -9,6 +9,8 @@ nessusbeat:
   #api_username:
   #api_password:
 
+name: nessusbeat
+
 #================================ General =====================================
 
 # The name of the shipper that publishes the network data. It can be used to group