Global Security Forum

Security Global Forum

Our mission is to provide clients with an online user community of industry peers and IBM experts, to exchange tips and tricks, best practices, and product knowledge. We hope the information you find here helps you maximize the value of your IBM Security solutions.

 View Only

  • 1.  SOAR Workflow not Completing

    Posted Tue May 10, 2022 05:29 PM
    Hi Everyone

    I am trying to run a Example Send Email workflow but my workflow just keep saying running and does not complete...


    Any ideas why?

    Regards
    Arno Pretorius

    ------------------------------
    Arno Pretorius
    ------------------------------


  • 2.  RE: SOAR Workflow not Completing

    Posted Wed May 11, 2022 10:43 AM

    Hello, 

    The workflow may be waiting on response. I'm not sure without more details about the workflow. 

    However, here is a great article on places to look within SOAR for logs. 

    Troubleshooting - IBM Documentation

    Thanks!

    Daryl



    ------------------------------
    Daryl Ladd
    ------------------------------



  • 3.  RE: SOAR Workflow not Completing

    Posted Thu May 12, 2022 04:54 PM
    if workflow using functions and resilient-circuits is not configured correctly or not running, workflow status will show running.
    You can check the action status if workflow function is pending or not. if it is pending, make sure resilient-circuits running.

    Thanks
    -Ram

    ------------------------------
    Ram Badvelu
    ------------------------------



  • 4.  RE: SOAR Workflow not Completing

    Posted Fri May 13, 2022 03:35 AM
    Good day Ram

    Thank you for the response.

    I managed to get the process working but now I am sitting with this error...

    "Post-processing script for Function 'Outbound Email: Send Email' from Workflow 'Example: Send Incident Email HTML' was unable to complete because: name 'results' is not defined"

    Would you be able to point me in the right directions of solving this?

    IBM Support just tells me to Up Skill myself.

    I am fairly new to IBM SOAR.

    I am trying to use the Outbound_Email function for some Automation we want to do.

    Regards
    Arno

    ------------------------------
    Arno Pretorius
    ------------------------------

    Original Message


  • 5.  RE: SOAR Workflow not Completing

    Posted Fri May 13, 2022 04:08 PM
    You can check resilient circuit logs if there are any errors, returns the correct data or not. Post processing script can fail if it returns null.

    Thanks
    -Ram

    ------------------------------
    Ram Badvelu
    ------------------------------

    Original Message


  • 6.  RE: SOAR Workflow not Completing

    Posted Fri May 13, 2022 05:00 PM
    Hi Ram

    Thank you for the response

    Quick question.. Where do I find the logs?
    Backend right?

    ------------------------------
    Arno Pretorius
    ------------------------------

    Original Message


  • 7.  RE: SOAR Workflow not Completing

    Posted Fri May 13, 2022 05:12 PM
    that's correct. resilient-circuits logs location is configurable in app.config.  You can refer the previous post for details -  Troubleshooting - IBM Documentation

    ------------------------------
    Ram Badvelu
    ------------------------------

    Original Message


  • 8.  RE: SOAR Workflow not Completing

    Posted Fri May 13, 2022 05:26 PM
    I can see where it talks about the error but it doesnt make sense to me...
    Not that clued up yet with these logs

    ------------------------------
    Arno Pretorius
    ------------------------------

    Original Message


Related Content