What bad news, then you can run from a daughter instance or you have to create another organization apart from the mssp, thank you for your response, have a good day.
------------------------------
jose g
------------------------------
Original Message:
Sent: Wed February 19, 2025 12:38 AM
From: mohamad islam hamadieh
Subject: Incident not found - please try a different incident ID.
Hi @jose g ,
unfortunately , this is how MSSP soar is designed , see QRadar SOAR: Cannot run an incident script from inside the MSSP configuration organization
they suggest to test your script in a different non-MSSP soar lap before.
------------------------------
mohamad islam hamadieh
Original Message:
Sent: Tue February 18, 2025 10:55 PM
From: jose g
Subject: Incident not found - please try a different incident ID.
Hello Jasmine
Was able to solve the problem of incident not found, I have the same problem in MSSP environment.
The incident does exist but the tool does not recognize it.
------------------------------
jose g
Original Message:
Sent: Wed February 22, 2023 04:12 AM
From: Jasmine J
Subject: Incident not found - please try a different incident ID.
Hi Lucian,
Incident exists.
Best
------------------------------
Jasmine J
Original Message:
Sent: Wed February 22, 2023 04:09 AM
From: Lucian Sipos
Subject: Incident not found - please try a different incident ID.
Hi
Are you sure the Incident ID exist? Maybe you are mismatching test with production environment..
------------------------------
Lucian Sipos
Original Message:
Sent: Tue February 21, 2023 08:19 AM
From: Jasmine J
Subject: Incident not found - please try a different incident ID.
Hi,
I'm trying to test script. But the error is "Incident not found - please try a different incident ID. " It's the id of simulation incident. Result is the same for real incident id.
The environment is mssp.
Any advice would be appreciated.
Best
------------------------------
Jasmine J
------------------------------