IBM Security QRadar SOAR

 View Only

  • 1.  Best Setup for Resilient Integration Extensions Development

    Posted Mon February 03, 2020 09:31 AM
    Hi all,

    I have installed the Resilient SOAR platform on a VM on my server. Now, I am a bit confused about what is the ideal development environment for writing my own integration as an extension. I would use my laptop and PyCharm for development and would like to setup the integration server locally on my laptop but I believe the integration server requires RHEL or CentOS but I have Ubuntu on my laptop. Is it possible to install the integration server on a Ubuntu OS?

    Second option is that I create a new VM, install the integration server libraries on it and then place all my integration extension's files on that VM. I can then edit/copy files from my local laptop to the integration server. I just think this setup is a bit clunky for development and debugging as I will have to move files from my laptop to the integration server, each time I make a change.

    Third option is to install the integration server on the same VM as the Resilient platform itself but I believe this is discouraged by IBM.

    Please point me towards the best setup among the above for development.

    Thanks and Regards!

    ------------------------------
    Umair Ahmed
    ------------------------------


  • 2.  RE: Best Setup for Resilient Integration Extensions Development

    IBM Champion
    Posted Tue February 04, 2020 09:46 AM
    @Umair Ahmed,

    I would recommend the second option​ you proposed. This will allow you to work on multiple integrations at a time, and not have to have each one completed on your machine when RC starts/restarts. Moving them will ensure you only apply what you want to, when you want to for testing.

    Best,
    Jared

    ------------------------------
    Jared Fagel
    Cyber Security Analyst I
    Public Utility
    ------------------------------

    Original Message


  • 3.  RE: Best Setup for Resilient Integration Extensions Development

    Posted Tue February 04, 2020 10:06 AM
    @Jared Fagel

    Thanks for your response. It makes sense to use a separate VM. Can you also suggest what is the best way to write and test my extensions from my personal laptop. I will be using PyCharm for dev and I want to avoid moving the python files to the integration server, each time I make a change and then test it.​

    ------------------------------
    Umair Ahmed
    ------------------------------

    Original Message


  • 4.  RE: Best Setup for Resilient Integration Extensions Development

    IBM Champion
    Posted Tue February 04, 2020 10:17 AM
    Hey @Umair Ahmed,

    PyCharm is also what I use, but I move the files each time for the same reason. You can make it easy on yourself by using FTP or even Git to pull files​ and better manage version control.

    Best,
    Jared

    ------------------------------
    Jared Fagel
    Cyber Security Analyst I
    Public Utility
    ------------------------------

    Original Message


  • 5.  RE: Best Setup for Resilient Integration Extensions Development

    Posted Tue February 04, 2020 10:19 AM
    Yeah, that's what I was planning to do as a last resort by using FileZilla for FTP server. 

    Thanks for your help!

    ------------------------------
    Umair Ahmed
    ------------------------------

    Original Message