IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Unable to save playbook

    Posted 06/16/22 03:11 PM

    When trying to save (after editing), disabling, or deleting my playbook I am getting the following error: 

    Error!

    The configuration references one or more invalid function inputs: XXXXXXXXXXXXXXXXXXXXX

    Has anyone faced a similar issue? What logs would you recommend looking at to diagnose this playbook issue?

    Thanks,

    Mark



    ------------------------------
    Mark Aksen
    ------------------------------


  • 2.  RE: Unable to save playbook

    Posted 06/17/22 03:13 AM
    Hi Mark,

    There is a known issue that when a filed is deleted from a function that is pre-added to a playbook, you will see the exact error when you try to save the playbook again.
    The workaround is: in the playbook, edit the fields of the problematic function (e.g., modify one of the static value) or, remove and re-add the function, then you should be able to save the playbook. Sorry for the inconvenience it will be fixed in the next release.

    Thanks.

    ------------------------------
    Gilbert Liao
    ------------------------------