IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Workflow status failed

    Posted 04/14/22 04:36 AM
    Hello,
           I have istalled 2 applications in cp4s (SOAR)  Qradar Functions for SOAR and Qradar Offense Enhanced Data migration both the aplications are ready to use state. But when I escalate offense into SOAR all the worlkflows got failed to run Error Screenshots are attached. Can anypne tell me where I found python script as shown in error because I did not find python script from script tab. Also kindly help me to resolve Error 2

    ------------------------------
    Hafiz Tabish Imran Bilgrami
    ------------------------------


  • 2.  RE: Workflow status failed

    Posted 04/15/22 09:03 AM
    That error is coming from the python code in the Function itself. You won't see it in the SOAR UI.  I don't have any insight into why it is happening but just pointed to point in the right direction.

    I'm not sure if there is a public git repository for those apps you are using. If there is the code would be there.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------



  • 3.  RE: Workflow status failed

    Posted 04/16/22 01:22 AM
    Hi Ben,
           Kindly see 3rd image, there is another error i faced

    ------------------------------
    Hafiz Tabish Imran Bilgrami
    ------------------------------



  • 4.  RE: Workflow status failed

    Posted 04/18/22 08:53 AM
    I wouldn't worry about the transition failure from 'Failed' to 'Failed'. The real problem is what is in the first screenshot. That is an error from the python code running on the AppHost for the Function.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------