IBM Security QRadar SOAR

Good morning.

I did a search in google and here in the discussions but dind't exactly find a topic for my problem.

I desigend a workflow which actually works when testing.

Now I have a real case and the workflow stopps with the message 


------------------------------
Achim Quehenberger
------------------------------

Hi Achim,

Take a look at https://www.ibm.com/support/pages/node/1846545 which lists the majority of the logs that Resilient outputs to. The client.log is the likely place to start looking.

------------------------------
BEN WILLIAMS
------------------------------

Original Message:
Sent: Tue April 21, 2020 04:03 AM
From: Achim Quehenberger
Subject: Workflow Logs

Good morning.

I did a search in google and here in the discussions but dind't exactly find a topic for my problem.

I desigend a workflow which actually works when testing.

Now I have a real case and the workflow stopps with the message 

But I have no clue why. All fields for the dependencies are set.
Is there some kind of log where I could find a more detailed error message with details why there is an error in the workflow?

Thanks,
Achim

------------------------------
Achim Quehenberger
------------------------------

Hi @BEN WILLIAMS ,

How we can monitor the workflow logs as there isn't any log  messages about workflows inside custom action log.

Best

------------------------------
Jasmine
------------------------------

Original Message:
Sent: Wed April 22, 2020 02:00 AM
From: BEN WILLIAMS
Subject: Workflow Logs

Hi Achim,

Take a look at https://www.ibm.com/support/pages/node/1846545 which lists the majority of the logs that Resilient outputs to. The client.log is the likely place to start looking.

------------------------------
BEN WILLIAMS

Original Message:
Sent: Tue April 21, 2020 04:03 AM
From: Achim Quehenberger
Subject: Workflow Logs

Good morning.

I did a search in google and here in the discussions but dind't exactly find a topic for my problem.

I desigend a workflow which actually works when testing.

Now I have a real case and the workflow stopps with the message 

But I have no clue why. All fields for the dependencies are set.
Is there some kind of log where I could find a more detailed error message with details why there is an error in the workflow?

Thanks,
Achim

------------------------------
Achim Quehenberger
------------------------------

Hi Jasmine,

The main application log file is /usr/share/co3/logs/client.log which will capture most of the workflow related errors.

------------------------------
BEN WILLIAMS
------------------------------

Original Message:
Sent: Mon July 06, 2020 07:50 AM
From: Jasmine
Subject: Workflow Logs

Hi @BEN WILLIAMS ,

How we can monitor the workflow logs as there isn't any log  messages about workflows inside custom action log.

Best

------------------------------
Jasmine

Original Message:
Sent: Wed April 22, 2020 02:00 AM
From: BEN WILLIAMS
Subject: Workflow Logs

Hi Achim,

Take a look at https://www.ibm.com/support/pages/node/1846545 which lists the majority of the logs that Resilient outputs to. The client.log is the likely place to start looking.

------------------------------
BEN WILLIAMS

Original Message:
Sent: Tue April 21, 2020 04:03 AM
From: Achim Quehenberger
Subject: Workflow Logs

Good morning.

I did a search in google and here in the discussions but dind't exactly find a topic for my problem.

I desigend a workflow which actually works when testing.

Now I have a real case and the workflow stopps with the message 

But I have no clue why. All fields for the dependencies are set.
Is there some kind of log where I could find a more detailed error message with details why there is an error in the workflow?

Thanks,
Achim

------------------------------
Achim Quehenberger
------------------------------

I would also like to know this about the logs:). 

However,  in my case this happened when task details page had a gateway which triggered different actions depending on yes/no answer chosen. And we kept forgetting to make our inputs in that part of the task. 


------------------------------
Abdullah Tadefi
------------------------------

Original Message:
Sent: Tue April 21, 2020 04:03 AM
From: Achim Quehenberger
Subject: Workflow Logs

Good morning.

I did a search in google and here in the discussions but dind't exactly find a topic for my problem.

I desigend a workflow which actually works when testing.

Now I have a real case and the workflow stopps with the message 

But I have no clue why. All fields for the dependencies are set.
Is there some kind of log where I could find a more detailed error message with details why there is an error in the workflow?

Thanks,
Achim

------------------------------
Achim Quehenberger
------------------------------

It is possible to require fields to have inputs if so desired.

Ben

------------------------------
Ben Lurie
------------------------------

Original Message:
Sent: Wed April 22, 2020 01:54 AM
From: Abdullah Tadefi
Subject: Workflow Logs

I would also like to know this about the logs:). 

However,  in my case this happened when task details page had a gateway which triggered different actions depending on yes/no answer chosen. And we kept forgetting to make our inputs in that part of the task. 

I am not sure if it helps.. 

Regards, 

------------------------------
Abdullah Tadefi

Original Message:
Sent: Tue April 21, 2020 04:03 AM
From: Achim Quehenberger
Subject: Workflow Logs

Good morning.

I did a search in google and here in the discussions but dind't exactly find a topic for my problem.

I desigend a workflow which actually works when testing.

Now I have a real case and the workflow stopps with the message 

But I have no clue why. All fields for the dependencies are set.
Is there some kind of log where I could find a more detailed error message with details why there is an error in the workflow?

Thanks,
Achim

------------------------------
Achim Quehenberger
------------------------------