IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Playbook Upgrade / Update Process

    Posted Thu June 08, 2023 02:09 PM

    All,

    I have made some updates to a playbook in our test environment that I would like to push to our production environment. I have exported the playbook from test but when I go to import the playbook into production I get the following error:

    Error text:

    Unable to import configuration settings because of a conflict with the following Playbooks: Unable to import playbook '[Artifact Enrichment] URL'. If you recently deleted the playbook with the same UUID, wait a few moments and try again. Exported playbook '[Artifact Enrichment] URL' has the same display name as a different playbook in this organization. Rename the conflicting playbook and try the import again.

    The error is stating there is already a playbook with the Display and API name of the one I'm trying to import, which of course is true because I'm trying to make changes to an existing playbook.

    Is there a proper way to push updates to existing playbooks?



    ------------------------------
    Liam Mahoney
    ------------------------------


  • 2.  RE: Playbook Upgrade / Update Process

    Posted Mon June 12, 2023 09:01 AM

    As of right now the only way would be to either delete the current playbook on the system and import the new one or just update the playbook currently on the system manually. 



    ------------------------------
    Richard Swierk
    ------------------------------



  • 3.  RE: Playbook Upgrade / Update Process

    Posted Mon July 31, 2023 05:35 PM

    Richard,

    Any idea if there are plans for improvement on this process?



    ------------------------------
    Liam Mahoney
    ------------------------------



  • 4.  RE: Playbook Upgrade / Update Process

    Posted Tue August 01, 2023 08:36 AM

    I am not sure to be honest.



    ------------------------------
    Richard Swierk
    ------------------------------