IBM Security QRadar SOAR

 View Only
  • 1.  How to run Resilient Circuit as a service

    Posted Sun October 29, 2023 05:03 PM
    Edited by benlinux Sun October 29, 2023 05:38 PM

    Hello Experts,

    I have resilient circuit running on a Windows server 2016, and I have successfully installed Resilient Circuit. However, I am not able to run Resilient Circuit as a service with an account that has admin right. I get the below error message. It works for the default admin account. Are there specific permissions the account requires to run the Resilient Circuit as a service.???

    Kindly assist.



    ------------------------------
    benlinux
    ------------------------------



  • 2.  RE: How to run Resilient Circuit as a service

    Posted Mon October 30, 2023 08:39 AM

    Hi -

    Have you followed the instructions from https://www.ibm.com/docs/en/sqsp/50?topic=system-installing-resilient-circuits-online? Please make sure that you follow those and let me know if that still doesn't work for you. If it doesn't, please give as much information as possible in your reply so that I can best assist you.

    Thanks!



    ------------------------------
    Bo Bleckel
    ------------------------------



  • 3.  RE: How to run Resilient Circuit as a service

    Posted Mon October 30, 2023 08:59 AM
    Edited by benlinux Mon October 30, 2023 09:00 AM

    Hi Bo Bleckel,

    Thank you for your response. I am using the IBM documentation you shared.

     
    Please note that the resilient circuits run without any error. I just have to make it as a service, so i don't have my cmd open indefinitely. This is what I intend to achieve from IBM documentation https://www.ibm.com/docs/en/sqsp/50?topic=system-installing-resilient-circuits-online. I want to use an account, and not the default admin account "Administrator" to start the resilient circuit. What permissions do I need to assign to the account to start the resilient circuit without the above error I received. As mentioned, the default admin account i.e. "Administrator" starts the resilient circuit service.
     



    ------------------------------
    benlinux
    ------------------------------



  • 4.  RE: How to run Resilient Circuit as a service

    Posted Mon October 30, 2023 11:07 AM

    Hi -

    Yes, that's the link I was trying to send above. I am not sure what account permissions are required, though generally I think that this service should be run from an admin account. If you can run resilient-circuits.exe run from the account you are logged in with, that will be enough to get it to work.

    Notice the line:


    It is recommended that you log in as whichever user account the service will run as to generate the config file and confirm that the app runs successfully with "resilient-circuits.exe run" before starting the service.

    from the documentation.



    ------------------------------
    Bo Bleckel
    ------------------------------