IBM QRadar SOAR

 View Only
  • 1.  API - SOAR Internal Server Error

    Posted Tue March 11, 2025 12:54 PM
    Good afternoon
    I wanted to ask how I can obtain the incidents generated in SOAR through the Python language, as well as create incidents via API.
    I have the following error when I run the SOAR API.

    import requests

    api_key_id =  '##############'
    api_key_secret = '##############'
    base_url = 'https://1.1.1.1/rest/orgs/209/'
    headers = {'Content-Type': 'application/json'}
    auth = (api_key_id, api_key_secret)

    #The options specified will be dependant on your specific connection requirements
    response = requests.get(u" {0} /incidents?want_closed=true".format(base_url), auth=auth, proxies=None, headers=headers, verify=False)

    print(response.content)
    # Verificar la respuesta

    b'{"success":false,"title":null,"message":"Internal Server Error","hints":[],"error_code":"generic"}'


    ------------------------------
    jose g
    ------------------------------


  • 2.  RE: API - SOAR Internal Server Error

    Posted Thu March 13, 2025 02:25 AM

    try basing the authentication as a base64 encode of "api_key_id:api_key_secret"



    ------------------------------
    Mohamad islam Hamadieh
    I post SOAR content and tips on linkedIn , follow me :)
    https://linkedin.com/in/mohamadislam
    ------------------------------