IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Automate SOAR-backup in Playbook

    Posted Fri February 16, 2024 10:54 AM

    Hello community,

    I'm encountering an issue with automating weekly backups for the SOAR system. I'm utilizing the "Network Utilities for SOAR" app and the "Linux Shell Command" function within a playbook to execute the "resSystemBackup" command.

    With the latest update (version 1.1.0), executing commands/scripts with sudo privileges has been introduced. Despite having sudo permissions, using "sudo command" prompts for a password, which I cannot provide due to the absence of a tty. Direct root login is also not an option for me.

    Although adding a script and a cronjob would simplify the process, my goal is to explore the feasibility of managing the backup directly through IBM SOAR.

    Am I overlooking any alternative methods, or does anyone have experience with a similar setup? Any insights or suggestions would be greatly appreciated.

    Best regards,
    Sascha Rüsenberg



    ------------------------------
    Sascha Rüsenberg
    ------------------------------


  • 2.  RE: Automate SOAR-backup in Playbook

    Posted Tue May 13, 2025 09:07 AM

    Hi Sascha,

    You can run automaticly soarSystemBackup, but only from external server crontab. I used pxssh class from pexpect python library and it works!

    Best regards
    Marcin Adamski



    ------------------------------
    Marcin Adamski
    ------------------------------