IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  fn_useragentanalysis error in resilient-circuits run

    Posted Fri April 12, 2019 03:54 AM
    after installing correcly the latest fn-useragentanalysis-1.0.0 package :
    Successfully installed fn-useragentanalysis-1.0.0

    and configure the app.config
    #[fn_useragentanalysis]
    url=https://api.whatismybrowser.com/api/v2/user_agent_parse
    api_key=---mykey---

    I run the circuits and get the following error:
    $ resilient-circuits run
    [...]
    2019-04-12 08:45:23,181 INFO [app] Logging Level: INFO
    2019-04-12 08:45:29,298 INFO [app] Components auto-load directory: (none)
    2019-04-12 08:45:30,104 ERROR [component_loader] Failed to load 'FnUseragentanalysisFunctionComponent = fn_useragentanalysis.components.func_useragentanalysis:FunctionComponent' from 'fn-useragentanalysis 1.0.0'
    2019-04-12 08:45:30,104 INFO [filelock] Lock 140197657690064 released on /home/resadmin/.resilient/resilient_circuits_lockfile
    Traceback (most recent call last):
    File "/home/resadmin/.pyenv/versions/2.7.15/bin/resilient-circuits", line 11, in <module>
    load_entry_point('resilient-circuits==32.0.126', 'console_scripts', 'resilient-circuits')()
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/resilient_circuits/bin/resilient_circuits_cmd.py", line 611, in main
    config_file=args.config_file)
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/resilient_circuits/bin/resilient_circuits_cmd.py", line 88, in run
    app.run(**kwargs)
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/resilient_circuits/app.py", line 311, in run
    application = App(*args, **kwargs)
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/resilient_circuits/app.py", line 171, in __init__
    self.do_initialization()
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/resilient_circuits/app.py", line 198, in do_initialization
    self.component_loader = ComponentLoader(self.opts)
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/resilient_circuits/component_loader.py", line 64, in __init__
    installed_components = self.discover_installed_components()
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/resilient_circuits/component_loader.py", line 90, in discover_installed_components
    return [ep.load() for ep in entry_points if ep.name not in self.noload]
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2434, in load
    return self.resolve()
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/pkg_resources/__init__.py", line 2440, in resolve
    module = __import__(self.module_name, fromlist=['__name__'], level=0)
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/fn_useragentanalysis/components/func_useragentanalysis.py", line 8, in <module>
    import fn_useragentanalysis.util.selftest as selftest
    ImportError: No module named util.selftest

    any clue to a solution of this error ?
    looks it is the same error than in this thread ? Resilient - Security
    Ibm remove preview
    Resilient - Security
    Hidden page that shows all messages in a thread
    View this on Ibm >


    ------------------------------
    BENOIT ROSTAGNI
    ------------------------------


  • 2.  RE: fn_useragentanalysis error in resilient-circuits run

    Posted Fri April 12, 2019 11:43 AM
    Hi Benoit,

    This is a known issue with <g class="gr_ gr_102 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" id="102" data-gr-id="102">selftest</g> being referenced. This will be addressed in the template file when the component gets created in a new release soon. For now, you can remove the import line and references to <g class="gr_ gr_472 gr-alert gr_spell gr_inline_cards gr_run_anim ContextualSpelling ins-del multiReplace" id="472" data-gr-id="472">selftest</g> from the file.

    ------------------------------
    Brian Walsh
    ------------------------------