IBM Security QRadar SOAR

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hi,

Apologies for the delayed response. I am trying replicate this issue. Do you have any logs associated with this ?

Regards,

------------------------------
Calvin Wynne

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hello Calvin,

I will really appreciate if this is resolved. In the app.log file, and I don't see anything that points to this issue. Just the connection to the resilient.

Regards,

------------------------------
benlinux

Original Message:
Sent: Fri November 03, 2023 07:08 AM
From: Calvin Wynne
Subject: Resilient Circuits service on Windows keeps stopping

Hi,

Apologies for the delayed response. I am trying replicate this issue. Do you have any logs associated with this ?

Regards,

------------------------------
Calvin Wynne

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hey Benlinux,

I suspect the path we are providing is not read properly on windows. You see we have to escape the "\" character on windows for it to be read while being passed as a string. Could you try replacing "\" with "\\" as shown below ?

resilient-circuits.exe service --res-circuits-args "--config-file C:\\Users\\Administrator\\test_app.config" 

Regards

------------------------------
Calvin Wynne

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I run and install the resilient circuits service without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Best Regards,

------------------------------
benlinux
------------------------------

Hello Calvin,

Kindly find the requested information.

Yes i installed pywin32 successfully:

app.log file as requested:

Resilient-circuits service is still stopping after apply this:
I used a new app.config file i.e. nlng_app.config.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.
------------------------------
benlinux

Original Message:
Sent: Fri November 03, 2023 06:50 PM
From: Calvin Wynne
Subject: Resilient Circuits service on Windows keeps stopping

Hey Benlinux,

I suspect the path we are providing is not read properly on windows. You see we have to escape the "\" character on windows for it to be read while being passed as a string. Could you try replacing "\" with "\\" as shown below ?

resilient-circuits.exe service --res-circuits-args "--config-file C:\\Users\\Administrator\\test_app.config" 

Regards

------------------------------
Calvin Wynne

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I run and install the resilient circuits service without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Best Regards,

------------------------------
benlinux
------------------------------

Hey Benlinux,

I suspect the path we are providing is not read properly on windows. You see we have to escape the "\" character on windows for it to be read while being passed as a string. Could you try replacing "\" with "\\" as shown below ?

resilient-circuits.exe service --res-circuits-args "--config-file C:\\Users\\Administrator\\test_app.config" 

Regards

------------------------------
Calvin Wynne

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hello Calvin,

It is not stopping again,

The commands worked. I think this should be documented in IBM documentation.

One more question, how do you use res-keyring with this custom app.config file??

Thanks,

------------------------------
benlinux

Original Message:
Sent: Fri November 03, 2023 06:50 PM
From: Calvin Wynne
Subject: Resilient Circuits service on Windows keeps stopping

Hey Benlinux,

I suspect the path we are providing is not read properly on windows. You see we have to escape the "\" character on windows for it to be read while being passed as a string. Could you try replacing "\" with "\\" as shown below ?

resilient-circuits.exe service --res-circuits-args "--config-file C:\\Users\\Administrator\\test_app.config" 

Regards

------------------------------
Calvin Wynne

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hello Calvin,

Please can you assist with this other question?

How do you use res-keyring with this custom app.config file??

Thanks 

Hello Calvin,

It is not stopping again,

The commands worked. I think this should be documented in IBM documentation.

One more question, how do you use res-keyring with this custom app.config file??

Thanks,

------------------------------
benlinux

Original Message:
Sent: Fri November 03, 2023 06:50 PM
From: Calvin Wynne
Subject: Resilient Circuits service on Windows keeps stopping

Hey Benlinux,

I suspect the path we are providing is not read properly on windows. You see we have to escape the "\" character on windows for it to be read while being passed as a string. Could you try replacing "\" with "\\" as shown below ?

resilient-circuits.exe service --res-circuits-args "--config-file C:\\Users\\Administrator\\test_app.config" 

Regards

------------------------------
Calvin Wynne

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hi Benlinux,

You could refer to this documentation. Like any resilient-circuits or resilient-sdk command, you can always set the Environment variable APP_CONFIG_FILE to the path to the config file. res-keyring will work just fine with that variable set and will interpolate any secrets from the file that the variable points to.

Regards,

Hello Calvin,

Please can you assist with this other question?

How do you use res-keyring with this custom app.config file??

Thanks 

Hello Calvin,

It is not stopping again,

The commands worked. I think this should be documented in IBM documentation.

One more question, how do you use res-keyring with this custom app.config file??

Thanks,

------------------------------
benlinux

Original Message:
Sent: Fri November 03, 2023 06:50 PM
From: Calvin Wynne
Subject: Resilient Circuits service on Windows keeps stopping

Hey Benlinux,

I suspect the path we are providing is not read properly on windows. You see we have to escape the "\" character on windows for it to be read while being passed as a string. Could you try replacing "\" with "\\" as shown below ?

resilient-circuits.exe service --res-circuits-args "--config-file C:\\Users\\Administrator\\test_app.config" 

Regards

------------------------------
Calvin Wynne

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hi Benlinux,

You could refer to this documentation. Like any resilient-circuits or resilient-sdk command, you can always set the Environment variable APP_CONFIG_FILE to the path to the config file. res-keyring will work just fine with that variable set and will interpolate any secrets from the file that the variable points to.

Regards,

Hello Calvin,

Please can you assist with this other question?

How do you use res-keyring with this custom app.config file??

Thanks 

Hello Calvin,

It is not stopping again,

The commands worked. I think this should be documented in IBM documentation.

One more question, how do you use res-keyring with this custom app.config file??

Thanks,

------------------------------
benlinux

Original Message:
Sent: Fri November 03, 2023 06:50 PM
From: Calvin Wynne
Subject: Resilient Circuits service on Windows keeps stopping

Hey Benlinux,

I suspect the path we are providing is not read properly on windows. You see we have to escape the "\" character on windows for it to be read while being passed as a string. Could you try replacing "\" with "\\" as shown below ?

resilient-circuits.exe service --res-circuits-args "--config-file C:\\Users\\Administrator\\test_app.config" 

Regards

------------------------------
Calvin Wynne

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hello Calvin,

Thanks for the help. Can you assist with this???

I thought this environmental variable APP_CONFIG_FILE applies to Resilient circuits running on Linux machine, I am working with Windows machine.

Also, the link you shared has been removed.

Please assist .

Regards

Hi Benlinux,

You could refer to this documentation. Like any resilient-circuits or resilient-sdk command, you can always set the Environment variable APP_CONFIG_FILE to the path to the config file. res-keyring will work just fine with that variable set and will interpolate any secrets from the file that the variable points to.

Regards,

Hello Calvin,

Please can you assist with this other question?

How do you use res-keyring with this custom app.config file??

Thanks 

Hello Calvin,

It is not stopping again,

The commands worked. I think this should be documented in IBM documentation.

One more question, how do you use res-keyring with this custom app.config file??

Thanks,

------------------------------
benlinux

Original Message:
Sent: Fri November 03, 2023 06:50 PM
From: Calvin Wynne
Subject: Resilient Circuits service on Windows keeps stopping

Hey Benlinux,

I suspect the path we are providing is not read properly on windows. You see we have to escape the "\" character on windows for it to be read while being passed as a string. Could you try replacing "\" with "\\" as shown below ?

resilient-circuits.exe service --res-circuits-args "--config-file C:\\Users\\Administrator\\test_app.config" 

Regards

------------------------------
Calvin Wynne

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hello,

If the "Resilient Circuits" service on Windows keeps stopping, it could be due to various issues. To resolve this, first, check the event logs for error details. Common solutions include updating the software, verifying system requirements, or examining conflicting applications. You may need to restart the service or seek help from IT support for a thorough diagnosis and resolution.

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------

Hi Usman,

I appreciate your recommendation. The problem has been fixed by adjusting the method we use to specify the path on Windows, as the previous path to the configuration file was incorrect. We resolved this issue by executing the provided commands.

resilient-circuits.exe service --res-circuits-args "--config-file C:\\Users\\Administrator\\nlng_app.config" install

resilient-circuits.exe service --res-circuits-args "--config-file C:\\Users\\Administrator\\nlng_app.config" start

Thanks,

------------------------------
Calvin Wynne

Original Message:
Sent: Tue November 07, 2023 05:23 AM
From: Usman Mushtaq
Subject: Resilient Circuits service on Windows keeps stopping

Hello,

If the "Resilient Circuits" service on Windows keeps stopping, it could be due to various issues. To resolve this, first, check the event logs for error details. Common solutions include updating the software, verifying system requirements, or examining conflicting applications. You may need to restart the service or seek help from IT support for a thorough diagnosis and resolution.

------------------------------
Usman Mushtaq

Original Message:
Sent: Thu November 02, 2023 04:21 AM
From: benlinux
Subject: Resilient Circuits service on Windows keeps stopping

Hello Experts,

I have successfully installed integration server on a Windows server 2016. I installed the app.config file in a different path. I observed that the Resilient service stops few minutes after been started.

Commands i used to install resilient::

> resilient-circuits.exe config -c C:\Users\Administrator\test_app.config

> resilient-circuits.exe run --config-file C:\Users\Administrator\test_app.config =====> This runs without any error.

> resilient-circuits.exe service install  ===> i have also tried > resilient-circuits.exe service --res-circuits-args "--config-file C:\Users\Administrator\test_app.config" install (still no luck)

The below gif explains the issue.

Please note, if I install the resilient without specifying a custom location or new name for the app.config file, it works perfectly i.e. the resilient circuits service runs without stopping.

Kindly assist I am on a SOAR project, and the customer does not want to save the app.config file in the default C: drive that resilient saves the app.config file (C:\Users\<User_name>\.resilient\).

Best Regards,

------------------------------
benlinux
------------------------------