IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  data feeder installation

    Posted Tue December 14, 2021 04:14 PM
    Edited by Alison Donato Wed December 15, 2021 08:42 AM
    Attempting to install data feeder for resilient onto our integration server; currently stuck at step 3.3 Deploy Customizations to the Resilient Platform.

    1. Use the following command to deploy these customizations to the Resilient platform:
    resilient-circuits customize [-l rc-data-feed]

    Running the command is giving an error:

    resilient-circuits: error: unrecognized arguments: [-l rc-data-feed]

    I've tried replacing parts of the command with the location of the installation, the rc_data_feeder tar package, removing the brackets, etc, but to no avail. I've also used the -h command as part of resilient-circuits to try alternative arguments/commands but I'm getting a wide range of error messages.


    Can anyone assist?

    Cheers


    ------------------------------
    Albert Tao
    ------------------------------


  • 2.  RE: data feeder installation

    Posted Wed December 15, 2021 02:37 PM
    Hi Albert,

    Do you know the version of resilient-circuits you're using? I don't recall the version we introduced this capability, but using a more current version of resilient-circuits (pip install --upgrade resilient-circuits) is always a good policy to stay up to date.

    If you need to stay with this version of resilient-circuits, just type 'resilient-circuits customize' and you will prompted for the different packages to import. Just ignore all the others until you get to rc-data-feed.

    Regards,
    Mark

    ------------------------------
    Mark Scherfling
    ------------------------------