IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Workflow Logs

    Posted Tue April 21, 2020 04:04 AM
    Good morning.

    I did a search in google and here in the discussions but dind't exactly find a topic for my problem.

    I desigend a workflow which actually works when testing.

    Now I have a real case and the workflow stopps with the message 

    But I have no clue why. All fields for the dependencies are set.
    Is there some kind of log where I could find a more detailed error message with details why there is an error in the workflow?

    Thanks,
    Achim


    ------------------------------
    Achim Quehenberger
    ------------------------------


  • 2.  RE: Workflow Logs

    Posted Wed April 22, 2020 02:01 AM
    Hi Achim,

    Take a look at https://www.ibm.com/support/pages/node/1846545 which lists the majority of the logs that Resilient outputs to. The client.log is the likely place to start looking.

    ------------------------------
    BEN WILLIAMS
    ------------------------------



  • 3.  RE: Workflow Logs

    Posted Mon July 06, 2020 07:50 AM
    Hi @BEN WILLIAMS ,

    How we can monitor the workflow logs as there isn't any log  messages about workflows inside custom action log.

    Best

    ------------------------------
    Jasmine
    ------------------------------



  • 4.  RE: Workflow Logs

    Posted Mon July 06, 2020 10:08 AM
    Hi Jasmine,

    The main application log file is /usr/share/co3/logs/client.log which will capture most of the workflow related errors.

    ------------------------------
    BEN WILLIAMS
    ------------------------------



  • 5.  RE: Workflow Logs

    Posted Wed April 22, 2020 06:35 AM
    I would also like to know this about the logs:). 

    However,  in my case this happened when task details page had a gateway which triggered different actions depending on yes/no answer chosen. And we kept forgetting to make our inputs in that part of the task. 
    I am not sure if it helps.. 

    Regards, 


    ------------------------------
    Abdullah Tadefi
    ------------------------------



  • 6.  RE: Workflow Logs

    Posted Tue July 07, 2020 07:32 AM
    It is possible to require fields to have inputs if so desired.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------