IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  Exchange Online Query Messages

    Posted 07/28/21 12:57 PM
    Has anyone gotten this workflow working by using "ALL" in the Email Address field? I can get results if I target a single email address, but if I want to search all mailboxes for a particular email message it fails after running for about an hour with an error -  "RecursionError: maximum recursion depth exceeded".

    I have the following configured in the app.config:

    max_messages = 10000
    max_users = 200000

    ------------------------------
    Ryan Terry
    ------------------------------


  • 2.  RE: Exchange Online Query Messages

    Posted 07/29/21 11:04 AM
    Hi Ryan

    Thanks for reporting this issue.  I think the problem you are seeing is in resilient-lib OAuth2 code.  A member of the community provided a fix but it has been difficult to set up the environment to test.  Are you running on App Host or an integration server?  If on an integration server perhaps I can provide you the fix to try it out? 

    AnnMarie

    ------------------------------
    AnnMarie Norcross
    ------------------------------



  • 3.  RE: Exchange Online Query Messages

    Posted 07/29/21 11:13 AM
    AnnMarie,

    Thanks for the reply. I am running App Host.

    ------------------------------
    Ryan Terry
    ------------------------------

    Original Message


Related Content