IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  API - SOAR Internal Server Error

    Posted Tue March 11, 2025 12:54 PM
    Good afternoon
    I wanted to ask how I can obtain the incidents generated in SOAR through the Python language, as well as create incidents via API.
    I have the following error when I run the SOAR API.

    import requests

    api_key_id =  '##############'
    api_key_secret = '##############'
    base_url = 'https://1.1.1.1/rest/orgs/209/'
    headers = {'Content-Type': 'application/json'}
    auth = (api_key_id, api_key_secret)

    #The options specified will be dependant on your specific connection requirements
    response = requests.get(u" {0} /incidents?want_closed=true".format(base_url), auth=auth, proxies=None, headers=headers, verify=False)

    print(response.content)
    # Verificar la respuesta

    b'{"success":false,"title":null,"message":"Internal Server Error","hints":[],"error_code":"generic"}'


    ------------------------------
    jose g
    ------------------------------


  • 2.  RE: API - SOAR Internal Server Error

    Posted Thu March 13, 2025 02:25 AM

    try basing the authentication as a base64 encode of "api_key_id:api_key_secret"



    ------------------------------
    Mohamad islam Hamadieh
    I post SOAR content and tips on linkedIn , follow me :)
    https://linkedin.com/in/mohamadislam
    ------------------------------