IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  TypeError when running Parsing Email

    Posted 04/16/20 12:17 PM
    We are using the example workflow "Example: Email Parsing" which includes two functions, "Utilities: Attachment to Base64" and "Utilities: Email Parse". It appears that Attachment to Base64 is working correctly and sending the base64 output to Email Parse but we are receiving the following error:

    Traceback (most recent call last):
    File "/resilient/acpt/py3/res-venv/lib/python3.6/site-packages/fn_utilities/components/utilities_email_parse.py", line 46, in _email_parse_function
    parsed_email = mailparser.parse_from_string(base64.b64decode(fn_inputs.get("base64content")))
    File "/resilient/acpt/py3/res-venv/lib/python3.6/site-packages/mailparser/mailparser.py", line 104, in parse_from_string
    return MailParser.from_string(s)
    File "/resilient/acpt/py3/res-venv/lib/python3.6/site-packages/mailparser/mailparser.py", line 221, in from_string
    message = email.message_from_string(s)
    File "/usr/lib/python3.6/email/__init__.py", line 38, in message_from_string
    return Parser(*args, **kws).parsestr(s)
    File "/usr/lib/python3.6/email/parser.py", line 68, in parsestr
    return self.parse(StringIO(text), headersonly=headersonly)
    TypeError: initial_value must be str or None, not bytes

    Has anyone seen this before or know how to fix this issue?

    Thanks

    ------------------------------
    William Racsek
    ------------------------------


  • 2.  RE: TypeError when running Parsing Email