IBM Security QRadar SOAR

 View Only

Automate SOAR-backup in Playbook

  • 1.  Automate SOAR-backup in Playbook

    Posted Fri February 16, 2024 10:54 AM

    Hello community,

    I'm encountering an issue with automating weekly backups for the SOAR system. I'm utilizing the "Network Utilities for SOAR" app and the "Linux Shell Command" function within a playbook to execute the "resSystemBackup" command.

    With the latest update (version 1.1.0), executing commands/scripts with sudo privileges has been introduced. Despite having sudo permissions, using "sudo command" prompts for a password, which I cannot provide due to the absence of a tty. Direct root login is also not an option for me.

    Although adding a script and a cronjob would simplify the process, my goal is to explore the feasibility of managing the backup directly through IBM SOAR.

    Am I overlooking any alternative methods, or does anyone have experience with a similar setup? Any insights or suggestions would be greatly appreciated.

    Best regards,
    Sascha Rüsenberg



    ------------------------------
    Sascha Rüsenberg
    ------------------------------