IBM Security QRadar SOAR

 View Only
Expand all | Collapse all

Question how to obtain log messages in in-product script at runtime

  • 1.  Question how to obtain log messages in in-product script at runtime

    Posted Thu September 19, 2019 11:19 PM
    We're allowed to use log messages methods such as log.info(..) in in-product script.
    At script development, we can confirm the message outputs in a console window from 'Run' button.
    But at run-time I could not see those messages are logged somewhere in log files such as client.log or resilient-scripting.log.

    Is there any specific file or enable setting?  Is there anyone can advice on this?

    ------------------------------
    Yohji Amano
    ------------------------------


  • 2.  RE: Question how to obtain log messages in in-product script at runtime

    Posted Mon September 27, 2021 01:34 PM
    I would like to know the answer to this question as well. It looks like the script logging just goes into the ether never to be seen again.

    ------------------------------
    Tim Gray
    ------------------------------



  • 3.  RE: Question how to obtain log messages in in-product script at runtime

    Posted Tue September 28, 2021 04:41 AM
    Hi Tim,

    We added these logs to resilient-scripting.log in v42 of the product. You can take a look at my post on the community about how it works.

    Thanks.

    ------------------------------
    Sean Mc Cann
    ------------------------------