IBM Security QRadar SOAR

 View Only
  • 1.  fn_utilities CrashLoopBackOff

    Posted Mon January 16, 2023 11:44 AM
    Hello,

    Please help me with a problem. The application fn_utilities (Utility Functions for SOAR) works flawless at AppHost 1.11.1.480. I just updated config (added one new remote_computer) and click "Save and Push Changes" and after that I started got an error:

    Traceback (most recent call last):
    File "/opt/app-root/bin/resilient-circuits", line 33, in <module>
    sys.exit(load_entry_point('resilient-circuits==47.1.3780', 'console_scripts', 'resilient-circuits')())
    File "/opt/app-root/bin/resilient-circuits", line 25, in importlib_load_entry_point
    return next(matches).load()
    File "/usr/lib64/python3.9/importlib/metadata.py", line 86, in load
    module = import_module(match.group('module'))
    File "/usr/lib64/python3.9/importlib/__init__.py", line 127, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
    File "<frozen importlib._bootstrap>", line 1030, in _gcd_import
    File "<frozen importlib._bootstrap>", line 1007, in _find_and_load
    File "<frozen importlib._bootstrap>", line 972, in _find_and_load_unlocked
    File "<frozen importlib._bootstrap>", line 228, in _call_with_frames_removed
    File "<frozen importlib._bootstrap>", line 1030, in _gcd_import
    File "<frozen importlib._bootstrap>", line 1007, in _find_and_load
    File "<frozen importlib._bootstrap>", line 972, in _find_and_load_unlocked
    File "<frozen importlib._bootstrap>", line 228, in _call_with_frames_removed
    File "<frozen importlib._bootstrap>", line 1030, in _gcd_import
    File "<frozen importlib._bootstrap>", line 1007, in _find_and_load
    File "<frozen importlib._bootstrap>", line 986, in _find_and_load_unlocked
    File "<frozen importlib._bootstrap>", line 680, in _load_unlocked
    File "<frozen importlib._bootstrap_external>", line 850, in exec_module
    File "<frozen importlib._bootstrap>", line 228, in _call_with_frames_removed
    File "/opt/app-root/lib64/python3.9/site-packages/resilient_circuits/__init__.py", line 9, in <module>
    from .actions_component import ResilientComponent
    File "/opt/app-root/lib64/python3.9/site-packages/resilient_circuits/actions_component.py", line 26, in <module>
    import resilient
    File "/opt/app-root/lib64/python3.9/site-packages/resilient/__init__.py", line 10, in <module>
    from .co3 import SimpleClient, \
    File "/opt/app-root/lib64/python3.9/site-packages/resilient/co3.py", line 17, in <module>
    from . import co3base
    File "/opt/app-root/lib64/python3.9/site-packages/resilient/co3base.py", line 21, in <module>
    from requests_toolbelt.multipart.encoder import MultipartEncoder
    File "/opt/app-root/lib64/python3.9/site-packages/requests_toolbelt/__init__.py", line 12, in <module>
    from .adapters import SSLAdapter, SourceAddressAdapter
    File "/opt/app-root/lib64/python3.9/site-packages/requests_toolbelt/adapters/__init__.py", line 12, in <module>
    from .ssl import SSLAdapter
    File "/opt/app-root/lib64/python3.9/site-packages/requests_toolbelt/adapters/ssl.py", line 16, in <module>
    from .._compat import poolmanager
    File "/opt/app-root/lib64/python3.9/site-packages/requests_toolbelt/_compat.py", line 56, in <module>
    from requests.packages.urllib3.contrib.pyopenssl \
    File "/opt/app-root/lib64/python3.9/site-packages/urllib3/contrib/pyopenssl.py", line 50, in <module>
    import OpenSSL.SSL
    File "/opt/app-root/lib64/python3.9/site-packages/OpenSSL/__init__.py", line 8, in <module>
    from OpenSSL import crypto, SSL
    File "/opt/app-root/lib64/python3.9/site-packages/OpenSSL/crypto.py", line 3268, in <module>
    _lib.OpenSSL_add_all_algorithms()
    AttributeError: module 'lib' has no attribute 'OpenSSL_add_all_algorithms'

    This is a very important application in my environment. I tried to rollback app.conf/re-delpoy and reinstall the application - no result.

    ------------------------------
    Gule Fahid
    ------------------------------


  • 2.  RE: fn_utilities CrashLoopBackOff

    Posted Tue January 17, 2023 06:00 AM
    did you by chance decommented a part of the config file related to SSL ?

    ------------------------------
    mohamad islam hamadieh
    ------------------------------



  • 3.  RE: fn_utilities CrashLoopBackOff

    Posted Tue January 17, 2023 07:02 AM
    I made nothing changes related to SSL. I reinstall the application few times. Even the new installed application with no changes in configuration has the issue. I tried to install the application at the AppHost 1.10.0.417 - same issue.

    ------------------------------
    Gule Fahid
    ------------------------------



  • 4.  RE: fn_utilities CrashLoopBackOff

    Posted Tue January 17, 2023 10:16 AM
    Hi all -- this was an issue with a rebuid of fn_utilities over the weekend. All has been rolledback and we are investigating how to properly rebuild the app with the latest libraries. For now, you can simply restart the app on app host and you should see that it now works. Please let me know if you're still having issues. Our apologies for the errors.

    ------------------------------
    Bo Bleckel
    ------------------------------



  • 5.  RE: fn_utilities CrashLoopBackOff

    Posted Tue January 17, 2023 11:40 AM
    Thank you for fixed issue! Now the app works like before.

    ------------------------------
    Gule Fahid
    ------------------------------