IBM Security QRadar SOAR

 View Only
  • 1.  Modifying Apps Code after installation

    Posted Thu September 23, 2021 03:36 AM
    Hello Guys,

    I have a question here about how to modify the code of the functions inside the app after installing the app using APPHOST.

    Actually, I was able to modify the python code inside the function when using the Integration server and Resilient Circuits. as I am going directly to the path where the package and function are installed (Package Name > Components > function), make the modification and then restart the resilient circuits to make changes take effect.

    But now for the APP host, I don't know how to do the same like integration server. so If anyone could help me with that it will be appreciated.

    Note: I am able to install the apps from the apps tab properly and the app host is running and paired with Resilient Platform.

    Thanks in advance.

    ------------------------------
    Omar Darweesh
    ------------------------------


  • 2.  RE: Modifying Apps Code after installation

    Posted Fri September 24, 2021 08:24 AM
    An App is different than an integration server in that it is "packaged". In addition, app code and runtime are combined into a Docker image. It is this Docker image that is run on the AppHost. 

    So effectively you would need to build your own App, creating a Docker image in the process. You would need to put that image into an image repository that the AppHost can access. Then you can install your new custom App and use it. 

    It wouldn't be the same as the original App. It will be a new App with a new app name (my recommendation).

    See https://www.ibm.com/docs/en/rsoa-and-rp/37?topic=adg-introduction for details.

    Ben


    ------------------------------
    Ben Lurie
    ------------------------------



  • 3.  RE: Modifying Apps Code after installation

    Posted Mon September 27, 2021 01:26 AM
    Hello Ben,

    So for any change on the functionality of the code, for example, I want to add a new request, adding artifact through API... Do I have to create a new package for any minor change??

    ------------------------------
    Omar Darweesh
    ------------------------------



  • 4.  RE: Modifying Apps Code after installation

    Posted Mon September 27, 2021 09:48 AM
    Yes a change requires a new package.

    The roadmap does include the concept of "custom function" which would be able to be created and edited directly in the UI. Don't know when this is scheduled.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------