IBM Security QRadar SOAR

 View Only
  • 1.  QRadar to Resilient integration

    Posted Fri November 08, 2019 09:57 AM
    Hello Everyone,

    Everything worked perfectly and suddenly I came across an unexpected error.
    Screenshot in the attachment.

    Maybe somebody saw this error and fix it?


    Integration app configured correctly.
    Everything worked until now.

    Thank you in advance!

    ------------------------------
    WBR,
    Alexandr
    ------------------------------


  • 2.  RE: QRadar to Resilient integration

    IBM Champion
    Posted Fri November 08, 2019 04:30 PM
    This should go through Resilient support, probably not the Community @Alexandr Lebedev.

    I imagine this occurs when you attempt to escalate an Offense to Resilient?

    I'd guess you have an issue in the template you're using (which would indicate a defect since it didn't alert you of the issue when you saved it and should be reported to Support). I bet you have something strange in the template like {{incident.set}} ... I have not seen this error before.

    Support will likely encourage you to check the developer console for more information on the error and/or ask for the template export.

    ------------------------------
    Jared Fagel
    Cyber Security Analyst Intern
    Public Utility
    ------------------------------



  • 3.  RE: QRadar to Resilient integration

    Posted Sun November 10, 2019 11:37 PM
    Thank you Jared!

    I will write now to support!

    ------------------------------
    Alexandr Lebedev
    ------------------------------



  • 4.  RE: QRadar to Resilient integration

    Posted Mon November 11, 2019 08:56 AM
    Hello Alexandr,

    This should be related with Offense Source. When the Offense Source has an invalid value to escalate, QRadar Plugin gives this Error message. 

    I recommend you to raise a ticket to support team to investigate this impact.

    Best regards,
    Can KUTU

    ------------------------------
    Can Kutu
    ------------------------------



  • 5.  RE: QRadar to Resilient integration

    Posted Mon November 11, 2019 09:06 AM
    @Redgy Saint Germain

    ------------------------------
    Connor Costello
    ------------------------------