IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Crowdstrike integration test with IBM SOAR fails

  • 1.  Crowdstrike integration test with IBM SOAR fails

    Posted Mon April 01, 2024 01:01 PM

    Hi,

    Iam trying to integrate Ibm SOAR with Crowdstrike, performed all the steps as per the document and when test, iam getting the following error,

    ------------------------
    Running selftest for: 'fn-crowd-strike'
    ------------------------


    fn-crowd-strike: 
    Exception Occured!
    Traceback (most recent call last):
      File "/opt/app-root/lib64/python3.9/site-packages/fn_crowd_strike/util/cs_api.py", line 47, in discover_all_event_stream
        if len(result['body']['resources']) > 0:
    TypeError: object of type 'NoneType' has no len()

        selftest: failure
        selftest output:
        {'state': 'failure', 'reason': None}
        Elapsed time: 1.539000 seconds

    ERROR: running selftest for App.
    Error Code: 1

    Can some one help in resolving this.

    Best Regards,

    Dinesh.



    ------------------------------
    Dinesh kumar
    ------------------------------


  • 2.  RE: Crowdstrike integration test with IBM SOAR fails

    Posted Tue April 02, 2024 08:15 AM

    Hi Dinesh,

    A new version, 1.0.5, has been posted by Crowdstrike which appears to have new selftest logic, among other changes. You can download and try the new version here: https://exchange.xforce.ibmcloud.com/hub/extension/8f2e16035b6adffe6da4a8c18d045fc7.

    Regards,



    ------------------------------
    Mark Scherfling
    ------------------------------