IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Error - Unable to run soarMoveAttachments

  • 1.  Error - Unable to run soarMoveAttachments

    Posted Fri March 07, 2025 06:07 AM

    Hi,

    I have ran the command:

    sudo soarMoveAttachments -n attach -s 20

    but I get the following error:

    $ sudo soarMoveAttachments -n attachments -s 10
    In case of any unexpected error happens when moving the data,
    it is recommended VM snapshot is taken before running this command.
    SOAR services will be restarted in the process of moving attachment files.
    Do you want to continue ? YES/NO: YES
    [2025-03-07 11:54:52] ERROR: The task includes an option with an undefined variable. The error was: 'lv_map' is undefined. 'lv_map' is undefined
    
    The error appears to be in '/usr/share/soar-backup/ansible/move_directory_to_new_lv.yml': line 55, column 7, but may
    be elsewhere in the file depending on the exact syntax problem.
    
    The offending line appears to be:
    
    
        - name: Get SOAR logical volume group name
          ^ here
    
    Total elapsed time: 00:00:03
    FAILED!  Unable to move attachments.

    What could be the issue please?

    Thanks,



    ------------------------------
    A P
    ------------------------------