IBM QRadar SOAR

 View Only

Error - Unable to run soarMoveAttachments

  • 1.  Error - Unable to run soarMoveAttachments

    Posted Fri March 07, 2025 06:07 AM

    Hi,

    I have ran the command:

    sudo soarMoveAttachments -n attach -s 20

    but I get the following error:

    $ sudo soarMoveAttachments -n attachments -s 10
    In case of any unexpected error happens when moving the data,
    it is recommended VM snapshot is taken before running this command.
    SOAR services will be restarted in the process of moving attachment files.
    Do you want to continue ? YES/NO: YES
    [2025-03-07 11:54:52] ERROR: The task includes an option with an undefined variable. The error was: 'lv_map' is undefined. 'lv_map' is undefined
    
    The error appears to be in '/usr/share/soar-backup/ansible/move_directory_to_new_lv.yml': line 55, column 7, but may
    be elsewhere in the file depending on the exact syntax problem.
    
    The offending line appears to be:
    
    
        - name: Get SOAR logical volume group name
          ^ here
    
    Total elapsed time: 00:00:03
    FAILED!  Unable to move attachments.

    What could be the issue please?

    Thanks,



    ------------------------------
    A P
    ------------------------------