IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Getting Error while Running Scripts

    Posted Thu April 25, 2024 09:36 AM
      |   view attached

    Hi Everyone,

    I am trying to create one script but I am getting error while running that the Incident Id is not correct. 

    But the Incident ID is correct only. Still that is not able to get the incident ID.

    Please see the error snap.

    Thanks,

    Shashi.



    ------------------------------
    Shashi swami
    ------------------------------


  • 2.  RE: Getting Error while Running Scripts

    Posted Mon May 06, 2024 09:32 AM

    Hi Shashi -

    You are trying to run the script as a test here. This will work for testing purposes, but shouldn't be used for actual production use of the script.

    To run the script simulation, you have to enter a valid incident ID from the incidents that are open in your system. I think that incident 11111 doesn't exist in your system. Check the incident list and try again with a valid incident. If this continues and you think that you are using a valid incident ID, then please share the incident details in your response so we can further look in to this.

    Bo



    ------------------------------
    Bo Bleckel
    ------------------------------



  • 3.  RE: Getting Error while Running Scripts

    Posted Tue May 07, 2024 05:37 AM

    Hi Shashi,

    Do you use MSSP? If so, are you running this from the configuration organisation using an incident ID from a child organisation? If yes, the configuration organisation has no access to incidents in any of the child organisations in the same way one child organisation cannot access incidents in another.

    If you are using MSSP and you want to test a script against an incident you can create a standard org, create the script in the new standard org, create an incident and then run the script again the incident. Make changes to the script until it works as expected and then recreate the script in the configuration org to be pushed down to the child organisations. 



    ------------------------------
    BEN WILLIAMS
    ------------------------------



  • 4.  RE: Getting Error while Running Scripts

    Posted Tue December 17, 2024 04:29 AM

    Hi @ben williams @ben williams @Ben Williams

    What do you mean by a standard organization here please ? 

    do you mean a whole new non-MSSP SOAR instance ?  if yes , how can I test on it since it dose not have the same configurations as the MSSP instance.



    ------------------------------
    mohamad islam hamadieh
    ------------------------------



  • 5.  RE: Getting Error while Running Scripts

    Posted Tue December 17, 2024 11:19 AM

    Hi Mohamad,

    See https://www.ibm.com/support/pages/node/7151113 for further details

    In short, recreate the code in a standalone organisation. You can recreate it manually or by exporting the configuration from the configuration org to the standalone org.



    ------------------------------
    BEN WILLIAMS
    ------------------------------



  • 6.  RE: Getting Error while Running Scripts

    Posted Thu December 19, 2024 07:35 AM

    Thanks ben ,

    for anyone who is struggling with this , PLEASE look in your client.log logs that what helped me the most , I have been going crazy with one error for a week.



    ------------------------------
    mohamad islam hamadieh
    ------------------------------