IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Not able to post Incident on Teams channel

  • 1.  Not able to post Incident on Teams channel

    Posted Wed March 20, 2024 03:51 PM

    Hi Team,

    We are having an issue with the function "MS Teams: Post Message" which is part of the package "Microsoft Teams".
    https://exchange.xforce.ibmcloud.com/hub/extension/4f8d9ec064c0ddf4555b3324d6ba499d

    We are not able to post messages on the team channel when the Incident description contains a string like "File Path: \\?\C:\Windows\xyz\abc.ps1"

    We are getting the error "Unable to Post message:
    Failure reason: Invalid \escape: line 1 column 418 (char 417)"

    When we made below changes in the input script of function "MS Teams: Post Message" - incident.description.content.replace('\\,'\\\\')

    We got the error "Unable to Post message:
    Failure reason: Expecting ',' delimiter: line 1 column 714 (char 713)"

    Please suggest for the solution.



    ------------------------------
    Arpit Nama
    ------------------------------


Related Content