IBM Security QRadar SOAR

 View Only

  • 1.  Workflow status failed

    Posted Thu April 14, 2022 04:36 AM
    Hello,
           I have istalled 2 applications in cp4s (SOAR)  Qradar Functions for SOAR and Qradar Offense Enhanced Data migration both the aplications are ready to use state. But when I escalate offense into SOAR all the worlkflows got failed to run Error Screenshots are attached. Can anypne tell me where I found python script as shown in error because I did not find python script from script tab. Also kindly help me to resolve Error 2

    ------------------------------
    Hafiz Tabish Imran Bilgrami
    ------------------------------


  • 2.  RE: Workflow status failed

    Posted Fri April 15, 2022 09:03 AM
    That error is coming from the python code in the Function itself. You won't see it in the SOAR UI.  I don't have any insight into why it is happening but just pointed to point in the right direction.

    I'm not sure if there is a public git repository for those apps you are using. If there is the code would be there.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------

    Original Message


  • 3.  RE: Workflow status failed

    Posted Sat April 16, 2022 01:22 AM
    Hi Ben,
           Kindly see 3rd image, there is another error i faced

    ------------------------------
    Hafiz Tabish Imran Bilgrami
    ------------------------------

    Original Message


  • 4.  RE: Workflow status failed

    Posted Mon April 18, 2022 08:53 AM
    I wouldn't worry about the transition failure from 'Failed' to 'Failed'. The real problem is what is in the first screenshot. That is an error from the python code running on the AppHost for the Function.

    Ben

    ------------------------------
    Ben Lurie
    ------------------------------

    Original Message