IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  Exchange Online Query Messages

    Posted Wed July 28, 2021 12:57 PM
    Has anyone gotten this workflow working by using "ALL" in the Email Address field? I can get results if I target a single email address, but if I want to search all mailboxes for a particular email message it fails after running for about an hour with an error -  "RecursionError: maximum recursion depth exceeded".

    I have the following configured in the app.config:

    max_messages = 10000
    max_users = 200000

    ------------------------------
    Ryan Terry
    ------------------------------


  • 2.  RE: Exchange Online Query Messages

    Posted Thu July 29, 2021 11:04 AM
    Hi Ryan

    Thanks for reporting this issue.  I think the problem you are seeing is in resilient-lib OAuth2 code.  A member of the community provided a fix but it has been difficult to set up the environment to test.  Are you running on App Host or an integration server?  If on an integration server perhaps I can provide you the fix to try it out? 

    AnnMarie

    ------------------------------
    AnnMarie Norcross
    ------------------------------

    Original Message


  • 3.  RE: Exchange Online Query Messages

    Posted Thu July 29, 2021 11:13 AM
    AnnMarie,

    Thanks for the reply. I am running App Host.

    ------------------------------
    Ryan Terry
    ------------------------------

    Original Message