IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Question how to obtain log messages in in-product script at runtime

    Posted Thu September 19, 2019 11:19 PM
    We're allowed to use log messages methods such as log.info(..) in in-product script.
    At script development, we can confirm the message outputs in a console window from 'Run' button.
    But at run-time I could not see those messages are logged somewhere in log files such as client.log or resilient-scripting.log.

    Is there any specific file or enable setting?  Is there anyone can advice on this?

    ------------------------------
    Yohji Amano
    ------------------------------


  • 2.  RE: Question how to obtain log messages in in-product script at runtime

    Posted Mon September 27, 2021 01:34 PM
    I would like to know the answer to this question as well. It looks like the script logging just goes into the ether never to be seen again.

    ------------------------------
    Tim Gray
    ------------------------------



  • 3.  RE: Question how to obtain log messages in in-product script at runtime

    Posted Tue September 28, 2021 04:41 AM
    Hi Tim,

    We added these logs to resilient-scripting.log in v42 of the product. You can take a look at my post on the community about how it works.

    Thanks.

    ------------------------------
    Sean Mc Cann
    ------------------------------