Knowledge Base

Ask A Question

Questions

0

InsightVM API: How to get Site ID from Asset?

I am trying to get Site information for a known Asset using the API but am not finding a direct path to do so. The [getAsset](https://help.rapid7.com/insightvm/en-us/api/index.html#operation/getAsset) endpoint response does not include Sites associated with the Asset from what I can see. [Asset Search](https://help.rapid7.com/insightvm/en-us/api/index.html#operation/findAssets) does allow for a filter in the request body to include site-id, but that involves knowing the Site going in to the search. The response from this endpoint does not include the site-id even though you can use it to search. I really want to avoid getting all Sites and then iterating over those to get all Site Assets and working backwards from there. A few ideas came up as potential workarounds. One would be to use Tags on Assets where certain Tags are reserved for specific Sites. That is a less than ideal workaround since users could add Tags to their Assets on their own so could mistakenly add a Tag reserved for a Site they don't belong to. This article, https://kb.help.rapid7.com/discuss/59b9a1439045c30026ca390b, has a way to link Assets to Sites via SQL so it appears it can be done. Although not a good idea by any means and I don't even know if it would work, I thought about running this as a report and then grabbing the report results via the API to provide this relationship. Sites also show up in the UI when looking at an Asset, so obviously the relationship exists but I can't seem to get to it cleanly using the API.

insightvm
nexpose

Posted by Eric Urban 9 days ago

0

Nexpose - Scheduled Backup caused failure in Security Console

A routine backup maintenance initiated a restart, but did not complete the restart which produced a hung state. The last few log logs and then the error line: [INFO] [Thread: CPU Memory monitor] The CPU and memory monitor thread was interrupted : sleep interrupted. [INFO] [Thread: Security Console Restart] Shutting down. [INFO] [Thread: Security Console Restart] Shutting down scan manager. [INFO] [Thread: Security Console Restart] Shutting down local scan engine. [ERROR] [Thread: Security Console Restart] Engine update thread pool still running. After that are Java exceptions on a 10 minute interval: Caused by: java.lang.ClassNotFoundException: Illegal access: this web application instance has been stopped already. Could not load [com.rapid7.nex.domain.user.RequestUserProvider]. The following stack trace is thrown for debugging purposes as well as to attempt to terminate the thread which caused the illegal access. Caused by: org.springframework.beans.factory.BeanCreationException: Could not autowire field: private com.rapid7.nex.system.user.IRequestUserProvider com.rapid7.nexpose.nsc.web.config.DatabaseConfig.m_requestUserProvider; nested exception is org.springframework.beans.factory.CannotLoadBeanClassException: Cannot find class [com.rapid7.nex.domain.user.RequestUserProvider] for bean with name 'requestUserProvider' defined in URL [jar:file:/opt/rapid7/nexpose/shared/lib/managed/domain-13.0.1.jar!/com/rapid7/nex/domain/user/RequestUserProvider.class]; nested exception is java.lang.ClassNotFoundException: Illegal access: this web application instance has been stopped already. Could not load [com.rapid7.nex.domain.user.RequestUserProvider]. The following stack trace is thrown for debugging purposes as well as to attempt to terminate the thread which caused the illegal access. Any insight into how/why this occurred and how to prevent?

nexpose
insightvm

Posted by William Shoemaker 18 days ago