IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Crowdstrike integration test with IBM SOAR fails

    Posted 04/01/24 01:01 PM

    Hi,

    Iam trying to integrate Ibm SOAR with Crowdstrike, performed all the steps as per the document and when test, iam getting the following error,

    ------------------------
    Running selftest for: 'fn-crowd-strike'
    ------------------------


    fn-crowd-strike: 
    Exception Occured!
    Traceback (most recent call last):
      File "/opt/app-root/lib64/python3.9/site-packages/fn_crowd_strike/util/cs_api.py", line 47, in discover_all_event_stream
        if len(result['body']['resources']) > 0:
    TypeError: object of type 'NoneType' has no len()

        selftest: failure
        selftest output:
        {'state': 'failure', 'reason': None}
        Elapsed time: 1.539000 seconds

    ERROR: running selftest for App.
    Error Code: 1

    Can some one help in resolving this.

    Best Regards,

    Dinesh.



    ------------------------------
    Dinesh kumar
    ------------------------------


  • 2.  RE: Crowdstrike integration test with IBM SOAR fails

    Posted 04/02/24 08:15 AM

    Hi Dinesh,

    A new version, 1.0.5, has been posted by Crowdstrike which appears to have new selftest logic, among other changes. You can download and try the new version here: https://exchange.xforce.ibmcloud.com/hub/extension/8f2e16035b6adffe6da4a8c18d045fc7.

    Regards,



    ------------------------------
    Mark Scherfling
    ------------------------------