IBM Security QRadar SOAR

 View Only
  • 1.  How to debug playbook's script

    Posted Thu May 05, 2022 12:34 AM
    I am getting few errors for some scenarios and not able to understand where the errors are triggered. I am able to get the logs but it is just displaying the error and not giving full thing here. I just wanted to add some log statements and see but we are getting illegal import logging. So wanted to understand is there any way we can debug the code with printing values and in which function it is failing.

    ------------------------------
    Meghana Medasani
    ------------------------------


  • 2.  RE: How to debug playbook's script

    Posted Fri May 06, 2022 02:43 AM
    I think you can check the following log file
     -  /var/log/resilient-scripting/resilient-scripting.log

    In-product script logs such as log.info("incident.id={0}".format(incident.id)) will be printerd in the above log like:
                                                
       15:34:02.129 [Thread-26] INFO v=unknown c.r.s.cpython.process.CPythonProcess - pid 31321: LoggerContext - incident.id=2200

    ------------------------------
    Yohji Amano
    ------------------------------