IBM Security QRadar SOAR

Hi,

You have such document:

https://www.ibm.com/docs/en/sqsp/44?topic=system-configuring-resilient-circuits-restart

In this situation using Python virtual environment is better (Please update your document in right way)

ExecStart=/usr/local/bin/resilient-circuits run

I want to run this from: 

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

Voila! This line working normalı and starts circuits. 

(integration) [integration@resilient-isnet .resilient]$ sudo systemctl status resilient_circuits[sudo] password for integration:● resilient_circuits.service - Resilient-Circuits Service   Loaded: loaded (/etc/systemd/system/resilient_circuits.service; enabled; vendor preset: disabled)   Active: failed (Result: exit-code) since Fri 2023-10-27 14:07:29 +03; 2h 53min ago  Process: 206803 ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits r> Main PID: 206803 (code=exited, status=203/EXEC)

Any advice would be appreciated.

Best

Jasmine

(https://community.ibm.com/community/user/security/discussion/running-multiple-resilient-circuits-in-multiple-virtualenv-for-mssps)

The support

Resilient Circuits is not written to work within a virtual Python environment but many clients run it this way. Our product documentation does not provide guidance on virtual environments so although other clients have it working that way the configuration and support of these environments are not within the scope of the support IBM provides.

There have been a few posts over the years on the community relating to virtual environments. You might be able to find something that helps or ask in the community -> https://ibm.biz/soarcommunity

Hi,

You have such document:

https://www.ibm.com/docs/en/sqsp/44?topic=system-configuring-resilient-circuits-restart

In this situation using Python virtual environment is better (Please update your document in right way)

ExecStart=/usr/local/bin/resilient-circuits run

I want to run this from: 

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

Voila! This line working normalı and starts circuits. 

(integration) [integration@resilient-isnet .resilient]$ sudo systemctl status resilient_circuits[sudo] password for integration:● resilient_circuits.service - Resilient-Circuits Service   Loaded: loaded (/etc/systemd/system/resilient_circuits.service; enabled; vendor preset: disabled)   Active: failed (Result: exit-code) since Fri 2023-10-27 14:07:29 +03; 2h 53min ago  Process: 206803 ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits r> Main PID: 206803 (code=exited, status=203/EXEC)

Any advice would be appreciated.

Best

Jasmine

(https://community.ibm.com/community/user/security/discussion/running-multiple-resilient-circuits-in-multiple-virtualenv-for-mssps)

Dear development team, please explain me a python package that is not written to work within a virtual Python environment as support said. 

------------------------------
Jasmin

Original Message:
Sent: Fri October 27, 2023 12:36 PM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

The support

Resilient Circuits is not written to work within a virtual Python environment but many clients run it this way. Our product documentation does not provide guidance on virtual environments so although other clients have it working that way the configuration and support of these environments are not within the scope of the support IBM provides.

There have been a few posts over the years on the community relating to virtual environments. You might be able to find something that helps or ask in the community -> https://ibm.biz/soarcommunity

------------------------------
Jasmin

Original Message:
Sent: Fri October 27, 2023 10:05 AM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

Hi,

You have such document:

https://www.ibm.com/docs/en/sqsp/44?topic=system-configuring-resilient-circuits-restart

In this situation using Python virtual environment is better (Please update your document in right way)

ExecStart=/usr/local/bin/resilient-circuits run

I want to run this from: 

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

Voila! This line working normalı and starts circuits. 

(integration) [integration@resilient-isnet .resilient]$ sudo systemctl status resilient_circuits[sudo] password for integration:● resilient_circuits.service - Resilient-Circuits Service   Loaded: loaded (/etc/systemd/system/resilient_circuits.service; enabled; vendor preset: disabled)   Active: failed (Result: exit-code) since Fri 2023-10-27 14:07:29 +03; 2h 53min ago  Process: 206803 ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits r> Main PID: 206803 (code=exited, status=203/EXEC)

Any advice would be appreciated.

Best

Jasmine

(https://community.ibm.com/community/user/security/discussion/running-multiple-resilient-circuits-in-multiple-virtualenv-for-mssps)

------------------------------
Jasmin
------------------------------

Hi Jasmin

The ExecStart line you are trying to use is not correct:

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

You should use the file location of resilient-circuits in your virtual environment.  With the virtual environment activated, type in:

which resilient-circuits

For me working in a my current virtual enviroment the directory looks like this

 % which resilient-circuits
/Users/annmarienorcross/.pyenv/versions/3.9.11/envs/py3911-myapp/bin/resilient-circuits

So in the resilient_circuits.service file ExecStart line should look like this:

ExecStart=/Users/annmarienorcross/.pyenv/versions/3.9.11/envs/py3911-myapp/bin/resilient-circuits run

Hope this helps!

------------------------------
AnnMarie Norcross

Original Message:
Sent: Fri October 27, 2023 12:40 PM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

Dear development team, please explain me a python package that is not written to work within a virtual Python environment as support said. 

------------------------------
Jasmin

Original Message:
Sent: Fri October 27, 2023 12:36 PM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

The support

Resilient Circuits is not written to work within a virtual Python environment but many clients run it this way. Our product documentation does not provide guidance on virtual environments so although other clients have it working that way the configuration and support of these environments are not within the scope of the support IBM provides.

There have been a few posts over the years on the community relating to virtual environments. You might be able to find something that helps or ask in the community -> https://ibm.biz/soarcommunity

------------------------------
Jasmin

Original Message:
Sent: Fri October 27, 2023 10:05 AM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

Hi,

You have such document:

https://www.ibm.com/docs/en/sqsp/44?topic=system-configuring-resilient-circuits-restart

In this situation using Python virtual environment is better (Please update your document in right way)

ExecStart=/usr/local/bin/resilient-circuits run

I want to run this from: 

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

Voila! This line working normalı and starts circuits. 

(integration) [integration@resilient-isnet .resilient]$ sudo systemctl status resilient_circuits[sudo] password for integration:● resilient_circuits.service - Resilient-Circuits Service   Loaded: loaded (/etc/systemd/system/resilient_circuits.service; enabled; vendor preset: disabled)   Active: failed (Result: exit-code) since Fri 2023-10-27 14:07:29 +03; 2h 53min ago  Process: 206803 ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits r> Main PID: 206803 (code=exited, status=203/EXEC)

Any advice would be appreciated.

Best

Jasmine

(https://community.ibm.com/community/user/security/discussion/running-multiple-resilient-circuits-in-multiple-virtualenv-for-mssps)

------------------------------
Jasmin
------------------------------

Hi AnnMarie,

I have solved the issue in this way.

Best

Yasemen

Hi Jasmin

The ExecStart line you are trying to use is not correct:

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

You should use the file location of resilient-circuits in your virtual environment.  With the virtual environment activated, type in:

which resilient-circuits

For me working in a my current virtual enviroment the directory looks like this

 % which resilient-circuits
/Users/annmarienorcross/.pyenv/versions/3.9.11/envs/py3911-myapp/bin/resilient-circuits

So in the resilient_circuits.service file ExecStart line should look like this:

ExecStart=/Users/annmarienorcross/.pyenv/versions/3.9.11/envs/py3911-myapp/bin/resilient-circuits run

Hope this helps!

------------------------------
AnnMarie Norcross

Original Message:
Sent: Fri October 27, 2023 12:40 PM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

Dear development team, please explain me a python package that is not written to work within a virtual Python environment as support said. 

------------------------------
Jasmin

Original Message:
Sent: Fri October 27, 2023 12:36 PM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

The support

Resilient Circuits is not written to work within a virtual Python environment but many clients run it this way. Our product documentation does not provide guidance on virtual environments so although other clients have it working that way the configuration and support of these environments are not within the scope of the support IBM provides.

There have been a few posts over the years on the community relating to virtual environments. You might be able to find something that helps or ask in the community -> https://ibm.biz/soarcommunity

------------------------------
Jasmin

Original Message:
Sent: Fri October 27, 2023 10:05 AM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

Hi,

You have such document:

https://www.ibm.com/docs/en/sqsp/44?topic=system-configuring-resilient-circuits-restart

In this situation using Python virtual environment is better (Please update your document in right way)

ExecStart=/usr/local/bin/resilient-circuits run

I want to run this from: 

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

Voila! This line working normalı and starts circuits. 

(integration) [integration@resilient-isnet .resilient]$ sudo systemctl status resilient_circuits[sudo] password for integration:● resilient_circuits.service - Resilient-Circuits Service   Loaded: loaded (/etc/systemd/system/resilient_circuits.service; enabled; vendor preset: disabled)   Active: failed (Result: exit-code) since Fri 2023-10-27 14:07:29 +03; 2h 53min ago  Process: 206803 ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits r> Main PID: 206803 (code=exited, status=203/EXEC)

Any advice would be appreciated.

Best

Jasmine

(https://community.ibm.com/community/user/security/discussion/running-multiple-resilient-circuits-in-multiple-virtualenv-for-mssps)

------------------------------
Jasmin
------------------------------

Hi Yasemen,

Thanks for letting us know that the problem was related to the OS and it is good news you were able to fix the problem.

Hi AnnMarie,

I have solved the issue in this way.

Best

Yasemen

Hi Jasmin

The ExecStart line you are trying to use is not correct:

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

You should use the file location of resilient-circuits in your virtual environment.  With the virtual environment activated, type in:

which resilient-circuits

For me working in a my current virtual enviroment the directory looks like this

 % which resilient-circuits
/Users/annmarienorcross/.pyenv/versions/3.9.11/envs/py3911-myapp/bin/resilient-circuits

So in the resilient_circuits.service file ExecStart line should look like this:

ExecStart=/Users/annmarienorcross/.pyenv/versions/3.9.11/envs/py3911-myapp/bin/resilient-circuits run

Hope this helps!

------------------------------
AnnMarie Norcross

Original Message:
Sent: Fri October 27, 2023 12:40 PM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

Dear development team, please explain me a python package that is not written to work within a virtual Python environment as support said. 

------------------------------
Jasmin

Original Message:
Sent: Fri October 27, 2023 12:36 PM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

The support

Resilient Circuits is not written to work within a virtual Python environment but many clients run it this way. Our product documentation does not provide guidance on virtual environments so although other clients have it working that way the configuration and support of these environments are not within the scope of the support IBM provides.

There have been a few posts over the years on the community relating to virtual environments. You might be able to find something that helps or ask in the community -> https://ibm.biz/soarcommunity

------------------------------
Jasmin

Original Message:
Sent: Fri October 27, 2023 10:05 AM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

Hi,

You have such document:

https://www.ibm.com/docs/en/sqsp/44?topic=system-configuring-resilient-circuits-restart

In this situation using Python virtual environment is better (Please update your document in right way)

ExecStart=/usr/local/bin/resilient-circuits run

I want to run this from: 

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

Voila! This line working normalı and starts circuits. 

(integration) [integration@resilient-isnet .resilient]$ sudo systemctl status resilient_circuits[sudo] password for integration:● resilient_circuits.service - Resilient-Circuits Service   Loaded: loaded (/etc/systemd/system/resilient_circuits.service; enabled; vendor preset: disabled)   Active: failed (Result: exit-code) since Fri 2023-10-27 14:07:29 +03; 2h 53min ago  Process: 206803 ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits r> Main PID: 206803 (code=exited, status=203/EXEC)

Any advice would be appreciated.

Best

Jasmine

(https://community.ibm.com/community/user/security/discussion/running-multiple-resilient-circuits-in-multiple-virtualenv-for-mssps)

------------------------------
Jasmin
------------------------------

Hi Ben,

Thanks for letting us to know that resilient circuits (that is a Python library!!! )  wasn't design for working with virtual environment :) (strange but true)

Hi Yasemen,

Thanks for letting us know that the problem was related to the OS and it is good news you were able to fix the problem.

Hi AnnMarie,

I have solved the issue in this way.

Best

Yasemen

Hi Jasmin

The ExecStart line you are trying to use is not correct:

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

You should use the file location of resilient-circuits in your virtual environment.  With the virtual environment activated, type in:

which resilient-circuits

For me working in a my current virtual enviroment the directory looks like this

 % which resilient-circuits
/Users/annmarienorcross/.pyenv/versions/3.9.11/envs/py3911-myapp/bin/resilient-circuits

So in the resilient_circuits.service file ExecStart line should look like this:

ExecStart=/Users/annmarienorcross/.pyenv/versions/3.9.11/envs/py3911-myapp/bin/resilient-circuits run

Hope this helps!

------------------------------
AnnMarie Norcross

Original Message:
Sent: Fri October 27, 2023 12:40 PM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

Dear development team, please explain me a python package that is not written to work within a virtual Python environment as support said. 

------------------------------
Jasmin

Original Message:
Sent: Fri October 27, 2023 12:36 PM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

The support

Resilient Circuits is not written to work within a virtual Python environment but many clients run it this way. Our product documentation does not provide guidance on virtual environments so although other clients have it working that way the configuration and support of these environments are not within the scope of the support IBM provides.

There have been a few posts over the years on the community relating to virtual environments. You might be able to find something that helps or ask in the community -> https://ibm.biz/soarcommunity

------------------------------
Jasmin

Original Message:
Sent: Fri October 27, 2023 10:05 AM
From: Jasmin
Subject: Running circuits via virtual environment inside resilient servis file issue

Hi,

You have such document:

https://www.ibm.com/docs/en/sqsp/44?topic=system-configuring-resilient-circuits-restart

In this situation using Python virtual environment is better (Please update your document in right way)

ExecStart=/usr/local/bin/resilient-circuits run

I want to run this from: 

ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits run

Voila! This line working normalı and starts circuits. 

(integration) [integration@resilient-isnet .resilient]$ sudo systemctl status resilient_circuits[sudo] password for integration:● resilient_circuits.service - Resilient-Circuits Service   Loaded: loaded (/etc/systemd/system/resilient_circuits.service; enabled; vendor preset: disabled)   Active: failed (Result: exit-code) since Fri 2023-10-27 14:07:29 +03; 2h 53min ago  Process: 206803 ExecStart=/ENV/integration/bin/python /ENV/integration/bin/resilient-circuits r> Main PID: 206803 (code=exited, status=203/EXEC)

Any advice would be appreciated.

Best

Jasmine

(https://community.ibm.com/community/user/security/discussion/running-multiple-resilient-circuits-in-multiple-virtualenv-for-mssps)

------------------------------
Jasmin
------------------------------