IBM QRadar SOAR

Hi Jose,

If you hover the cursor over the "Status: XError" in the upper left corner, you should see more information on the AppHost error.

What does it say?

CrashLoopBackOff: back-off 5m0s restarting failed container=63e13a9d-e554-4465-8ed8-e262de45116d pod=63e13a9d-e554-4465-8ed8-e262de45116d-c55b5cc6-nw56b_d945413b-9231-450c-a12e-6d9aa38f9f37(c82c42ce-f03e-4335-b83b-e35bfaa99c8c)

Hi Jose,

Can you download the app log file from the SOAR UI and see if there are errors in there?

If not can you log into the AppHost and look at the app log there?  On AppHost run this command:

kubectl get pods -L app.kubernetes.io/instance -A

# then, using the output from that to capture the pod name and namespace, run the following: 
kubectl describe pod <pod_name> -n <namespace>

Good morning Jose

So you don't see any pod with status CrashLoopBackOff ?

When a pod is in this state it is in a loop trying to restart the pod with increased time between each attempt.  Have you checked that the app.config is correct?  Unfortunately the Palo Alto Firewall app is developed by a third party (not IBM) so you would have to contact them for support.

The solution did not work, I had to uninstall the application because it did not work, the palo alto could not be integrated.