IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Troubleshooting Guidance and Full Logs for "Call REST API" Function in "REST API Functions for SOAR" App for IBM SOAR

  • 1.  Troubleshooting Guidance and Full Logs for "Call REST API" Function in "REST API Functions for SOAR" App for IBM SOAR

    Posted Thu April 03, 2025 05:15 AM

    Hello guy, 

    I am currently encountering an issue with the "Call REST API" function in the REST API Functions for SOAR app within IBM SOAR. The error message I receive is as follows:

    ERROR: "'Retry limit exceeded'"

    Despite multiple attempts, I have been unable to resolve this issue on my own, and I could not find relevant documentation to help troubleshoot this specific error. Therefore, I would like to kindly request the following:

    1. Detailed troubleshooting steps or guidance for resolving the "'Retry limit exceeded'" error with the "Call REST API" function.

    2. Access to the full logs related to the error encountered during the execution of the function. This would help in understanding the root cause of the issue.

    3. If there are any configuration checks or specific settings I should verify to prevent this error from occurring, please include those as well.



    ------------------------------
    Dungbk SVTech
    ------------------------------


  • 2.  RE: Troubleshooting Guidance and Full Logs for "Call REST API" Function in "REST API Functions for SOAR" App for IBM SOAR

    Posted Thu April 03, 2025 07:10 PM

    Hi Dungbk,

    This error means the function attempted to call the URL multiple times based on the function's rest_retry_tries input field. You can access the logs from the App's Download Logs link under Administrative Settings -> Apps. If the logs doesn't provide the detail needed, add 'loglevel=DEBUG' to your [resilient] section of the app.config file. This action will restart the app and a further execution of the function will provide further detail.

    Good luck.



    ------------------------------
    Mark Scherfling
    ------------------------------



  • 3.  RE: Troubleshooting Guidance and Full Logs for "Call REST API" Function in "REST API Functions for SOAR" App for IBM SOAR

    Posted Thu May 15, 2025 06:33 AM

    i have given retry_tries=2 , and added loglevel=debug i am getting this error can you tell me what to do.and  api owner given 100 requests per sec.

    ERROR:

     

    "'Retry limit exceeded'"
      File "/opt/app-root/lib64/python3.11/site-packages/circuits/core/manager.py", line 829, in processTask
        raise value.extract()
      File "/opt/app-root/lib64/python3.11/site-packages/resilient_circuits/actions_component.py", line 97, in _on_task
        yield result.get()
              ^^^^^^^^^^^^
      File "/usr/lib64/python3.11/multiprocessing/pool.py", line 774, in get
        raise self._value
      File "/usr/lib64/python3.11/multiprocessing/pool.py", line 125, in worker
        result = (True, func(*args, **kwds))
                        ^^^^^^^^^^^^^^^^^^^
      File "/opt/app-root/lib64/python3.11/site-packages/resilient_circuits/decorators.py", line 304, in _invoke_app_function
        for r in fn_results:
      File "/opt/app-root/lib64/python3.11/site-packages/fn_rest_api/components/funct_rest_api.py", line 343, in _app_function
        raise IntegrationError(str(err))

    Can you help me with above error .guide me to resolve this error in step by step.

    thanks ,

    sai



    ------------------------------
    Cyber SOC Engineering
    ------------------------------



  • 4.  RE: Troubleshooting Guidance and Full Logs for "Call REST API" Function in "REST API Functions for SOAR" App for IBM SOAR

    Posted Thu May 15, 2025 09:44 AM

    This usually occurs because of a malformed api request. Make sure the URL and parameters you are using are formatted correctly.



    ------------------------------
    Richard Swierk
    ------------------------------