IBM QRadar SOAR

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Workflow Logs

    Posted 04/21/20 04:04 AM
    Good morning.

    I did a search in google and here in the discussions but dind't exactly find a topic for my problem.

    I desigend a workflow which actually works when testing.

    Now I have a real case and the workflow stopps with the message 

    But I have no clue why. All fields for the dependencies are set.
    Is there some kind of log where I could find a more detailed error message with details why there is an error in the workflow?

    Thanks,
    Achim


    ------------------------------
    Achim Quehenberger
    ------------------------------


  • 2.  RE: Workflow Logs

    Posted 04/22/20 02:01 AM
    Hi Achim,

    Take a look at https://www.ibm.com/support/pages/node/1846545 which lists the majority of the logs that Resilient outputs to. The client.log is the likely place to start looking.

    ------------------------------
    BEN WILLIAMS
    ------------------------------



  • 3.  RE: Workflow Logs

    Posted 07/06/20 07:50 AM
    Hi @BEN WILLIAMS ,

    How we can monitor the workflow logs as there isn't any log  messages about workflows inside custom action log.

    Best

    ------------------------------
    Jasmine
    ------------------------------



  • 4.  RE: Workflow Logs

    Posted 07/06/20 10:08 AM
    Hi Jasmine,

    The main application log file is /usr/share/co3/logs/client.log which will capture most of the workflow related errors.

    ------------------------------
    BEN WILLIAMS
    ------------------------------



  • 5.  RE: Workflow Logs

    Posted 04/22/20 06:35 AM
    I would also like to know this about the logs:). 

    However,  in my case this happened when task details page had a gateway which triggered different actions depending on yes/no answer chosen. And we kept forgetting to make our inputs in that part of the task. 
    I am not sure if it helps.. 

    Regards, 


    ------------------------------
    Abdullah Tadefi
    ------------------------------



  • 6.  RE: Workflow Logs

    Posted 07/07/20 07:32 AM
    It is possible to require fields to have inputs if so desired.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------