IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only

  • 1.  fn_components logging issue

    Posted 03/30/21 05:20 PM
    Hi all,

    I have a logging problem with fn_components app. The function that i wrote is working well but some logs do not. I tried to define logdir&logfile parameter as below. If i kill "resilient-circuits run" process in pod and re-run with writing "resilient-circuits run" on shell, logging works as expected. 

    Any idea?

    Logs that do not work.
    [actions_component]
    [client]




    ------------------------------
    Burak Karaduman
    ------------------------------


  • 2.  RE: fn_components logging issue

    Posted 03/31/21 09:45 AM
    I think the values for logdir and logfile should go under the [resilient] section. Those are not specific to a particular component.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------



  • 3.  RE: fn_components logging issue

    Posted 03/31/21 09:52 AM
    Hi Ben,

    Thanks for your reply.

    I tried both of them, resilent section and custom section.

    Btw, documents say that logdir and logfile is /var/log/rescircuits & app.log as default. Ben, does your components app log activities? I tried with fresh install, problem is same.

    ------------------------------
    Burak Karaduman
    ------------------------------

    Original Message


Related Content