IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Checking message destinations status on Resilient v34.1.56

  • 1.  Checking message destinations status on Resilient v34.1.56

    Posted Fri November 15, 2019 10:09 AM
    Hi,

    We used to be able to monitor the number of messages in each message destination using a SQL query that was provided to us by support but it seems not to be working anymore and, if I recall correctly, it might be due to a change introduced in version 34 which moved these messages from the database to an AMPQ based system. Am I right?

    If that's the case, can you please provide a way/command to check the number of messages currently present in the message destinations?

    Regards,

    ------------------------------
    Carlos Ortigoza
    ------------------------------


  • 2.  RE: Checking message destinations status on Resilient v34.1.56

    Posted Mon November 18, 2019 09:16 AM
    I believe that messages posted to a message destination are still in the same tables. What has changed is the tables used to store data for scheduled background jobs. I'm not sure how much I can say about the implementation of that. If you are interested in the details there you may need to open a support ticket and we may be able to assist.

    ------------------------------
    Ben Lurie
    ------------------------------