IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  fn-get-file error in resilient circuits run

    Posted Fri April 12, 2019 04:49 AM
    after installing fn-get-file-1.0.0 correctly
    Successfully installed fn-get-file-1.0.0

    no change in app.config is listed :
    $ resilient-circuits config -u
    UPDATING config file /home/resadmin/.resilient/app.config
    No updates.

    the resilient circuits run get an error in loading, missing the section in the app config :
    2019-04-12 09:09:47,375 INFO [component_loader] 'fn_get_file.components.get_file.FunctionComponent' loading
    2019-04-12 09:09:47,377 ERROR [component_loader] Failed to load 'fn_get_file.components.get_file.FunctionComponent'
    Traceback (most recent call last):
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/resilient_circuits/component_loader.py", line 102, in _register_components
    component_class(opts=self.opts).register(self)
    File "/home/resadmin/.pyenv/versions/2.7.15/lib/python2.7/site-packages/fn_get_file/components/get_file.py", line 21, in __init__
    raise ValueError("{} section is not set in the config file".format(CONFIG_DATA_SECTION))
    ValueError: fn_get_file section is not set in the config file

    it seems it miss the integation of the path in config.py:
    config_data = u"""[fn_get_file]
    path=/home/resadmin/.resilient/some_dir
    """

    and it might be a non publish integration from Craig - sorry - but in case it helps, I left the message here.

    ------------------------------
    BENOIT ROSTAGNI
    ------------------------------


  • 2.  RE: fn-get-file error in resilient circuits run

    Posted Fri April 12, 2019 12:04 PM
    Hi Benoit,

    I don't see this integration as an officially published integration. From the description, my guess is the config.py file might need to be updated. After updating it, you could publish it to the App Exchange as a Community App if you'd like.

    ------------------------------
    Brian Walsh
    ------------------------------

    Original Message


  • 3.  RE: fn-get-file error in resilient circuits run

    Posted Fri April 12, 2019 01:11 PM
    Thanks Brian,

    I well talk to Craig about it.
    He owns the code.

    Benoit

    ------------------------------
    BENOIT ROSTAGNI
    ------------------------------

    Original Message


  • 4.  RE: fn-get-file error in resilient circuits run

    Posted Fri April 12, 2019 01:32 PM
    So there was an issue where I had not properly uncommented the util file. 

    It should have been 

    def config_section_data():
    """Produce the default configuration section for app.config,
       when called by `resilient-circuits config [-c|-u]`
    """
    config_data = u"""[fn_get_file]
path=/home/resadmin/.resilient/some_dir
"""
    return config_data​


    But was 

    def config_section_data():
    """Produce the default configuration section for app.config,
       when called by `resilient-circuits config [-c|-u]`
    """
    config_data = u"""[fn_get_file]
path=/home/resadmin/.resilient/some_dir
"""
#    return config_data
     return None


    I have sent you the fixed version internally.

    ------------------------------
    CRAIG ROBERTS
    ------------------------------

    Original Message


  • 5.  RE: fn-get-file error in resilient circuits run

    Posted Fri April 12, 2019 01:40 PM
    Thanks Craig :)

    ------------------------------
    BENOIT ROSTAGNI
    ------------------------------

    Original Message