IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  IBM SOAR Playbook

    Posted 10/24/23 07:36 AM

    Hello, 

    I want to create a playbook to send notification to relevant team about the incident for that i design a playbook, namely as artifact_collected, output of artifact collected, update incident with attachment, Send email to notify. It is showing that my playbook is executing properly however, in the CLI while running the cmd "tail -f /var/log/messages" i have seen an error namely "ERROR [action_message] FunctionResult must be a dictionary. 'NoneType' may cause the workflow to fail"

    Attached the screenshot of playbook and error. 

    Can someone identify where i am doing wrong?



    ------------------------------
    Umair Khan
    ------------------------------