IBM Security QRadar SOAR

 View Only

  • 1.  Exchange Online Query Messages

    Posted Wed July 28, 2021 12:57 PM
    Has anyone gotten this workflow working by using "ALL" in the Email Address field? I can get results if I target a single email address, but if I want to search all mailboxes for a particular email message it fails after running for about an hour with an error -  "RecursionError: maximum recursion depth exceeded".

    I have the following configured in the app.config:

    max_messages = 10000
    max_users = 200000

    ------------------------------
    Ryan Terry
    ------------------------------


  • 2.  RE: Exchange Online Query Messages

    Posted Thu July 29, 2021 11:04 AM
    Hi Ryan

    Thanks for reporting this issue.  I think the problem you are seeing is in resilient-lib OAuth2 code.  A member of the community provided a fix but it has been difficult to set up the environment to test.  Are you running on App Host or an integration server?  If on an integration server perhaps I can provide you the fix to try it out? 

    AnnMarie

    ------------------------------
    AnnMarie Norcross
    ------------------------------

    Original Message


  • 3.  RE: Exchange Online Query Messages

    Posted Thu July 29, 2021 11:13 AM
    AnnMarie,

    Thanks for the reply. I am running App Host.

    ------------------------------
    Ryan Terry
    ------------------------------

    Original Message