IBM Security Resilient

Expand all | Collapse all

Assigning Value Throws nonetype error

  • 1.  Assigning Value Throws nonetype error

    Posted Wed February 19, 2020 01:18 PM
      |   view attached
    Hey there, 

    We recently noticed that our script for parsing email messages sent to Resilient started to throw the following error: 'Nonetype' object is not iterable. 

    We were able to narrow it down to the following line:
    incident.properties.incident_origin = "Email"


    The field incident_origin is a select field with the following values: 
    SIEM
    Email
    Hotline
    SOC Analyst
    Hotline Call
    Threat Hunting 

    We previously had that assigned and nothing was modified in either the field or the script but yet it mysteriously broke this week. 

    I attempted to see if it was all select fields but when I tested against another one it worked.  

    I have attached a picture of what the field looks like. Any ideas as to why this occurred would be helpful. 

    Thanks!



    ------------------------------
    Adina Bodkins
    ------------------------------


  • 2.  RE: Assigning Value Throws nonetype error

    Posted Mon February 24, 2020 01:57 PM
    Hey Adina,

    I believe it needs to be this since it's a select field, not a text field:​

    incident.properties.incident_origin = ["Email"]

    ------------------------------
    Jared Fagel
    Cyber Security Analyst I
    Public Utility
    ------------------------------



  • 3.  RE: Assigning Value Throws nonetype error

    Posted Mon February 24, 2020 02:47 PM
    I set up my system with the field as you have shown and was able to set it properly:

    I would suggest something else is causing this issue.

    Do you have the actual error message?

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------