IBM Security QRadar SOAR

 View Only
  • 1.  Java import statement error

    Posted Fri April 15, 2022 12:43 PM
    Hi - I'm using the 'Exchange Online: Query Messages' function as part of the fn_exchange_online 1.3.0 app. In my pre-processing script of the function task inside my playbook, I have a 'from java.util import Date' statement. The statement is there in order to specify the date range to search through. But I'm receiving the following error (upon incident activation (i.e. playbook trigger)):

    'Unable to set inputs using a script for Function 'Exchange Online: Query Messages' from Playbook 'O365 test' because: ResilientSecurityException: Script contains the following illegal imports: "java.util" ' 

    This is rather strange, since the app-provided workflow has the exact same import statement in their post-processing script. 
    Why would there be such a difference between the playbook and workflow. And how would you go about resolving this issue?


    ------------------------------
    Mark Aksen
    ------------------------------


  • 2.  RE: Java import statement error

    Posted Mon April 18, 2022 02:39 AM
    Hi Mark,

    "java.util" is only supported for python 2 script, maybe you are using python 3 script? If you are, you can use "datetime" module instead. See more details on this documentation for the differences between python 2 and python 3. https://www.ibm.com/docs/fr/sqsp/44?topic=scripts-python-2-python-3-differences

    ------------------------------
    Gilbert Liao
    ------------------------------



  • 3.  RE: Java import statement error

    Posted Mon April 18, 2022 10:44 AM
    Thank you Gilbert - you are spot on. It was failing because I was using the "java.util" in my python3 script.

    ------------------------------
    Mark Aksen
    ------------------------------