IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

  • 1.  QRadar to Resilient integration

    Posted Fri November 08, 2019 09:57 AM
    Hello Everyone,

    Everything worked perfectly and suddenly I came across an unexpected error.
    Screenshot in the attachment.

    Maybe somebody saw this error and fix it?


    Integration app configured correctly.
    Everything worked until now.

    Thank you in advance!

    ------------------------------
    WBR,
    Alexandr
    ------------------------------


  • 2.  RE: QRadar to Resilient integration

    Posted Fri November 08, 2019 04:30 PM
    This should go through Resilient support, probably not the Community @Alexandr Lebedev.

    I imagine this occurs when you attempt to escalate an Offense to Resilient?

    I'd guess you have an issue in the template you're using (which would indicate a defect since it didn't alert you of the issue when you saved it and should be reported to Support). I bet you have something strange in the template like {{incident.set}} ... I have not seen this error before.

    Support will likely encourage you to check the developer console for more information on the error and/or ask for the template export.

    ------------------------------
    Jared Fagel
    Cyber Security Analyst Intern
    Public Utility
    ------------------------------

    Original Message


  • 3.  RE: QRadar to Resilient integration

    Posted Sun November 10, 2019 11:37 PM
    Thank you Jared!

    I will write now to support!

    ------------------------------
    Alexandr Lebedev
    ------------------------------

    Original Message


  • 4.  RE: QRadar to Resilient integration

    Posted Mon November 11, 2019 08:56 AM
    Hello Alexandr,

    This should be related with Offense Source. When the Offense Source has an invalid value to escalate, QRadar Plugin gives this Error message. 

    I recommend you to raise a ticket to support team to investigate this impact.

    Best regards,
    Can KUTU

    ------------------------------
    Can Kutu
    ------------------------------

    Original Message


  • 5.  RE: QRadar to Resilient integration

    Posted Mon November 11, 2019 09:06 AM
    @Redgy Saint Germain ​

    ------------------------------
    Connor Costello
    ------------------------------

    Original Message


Related Content