IBM Security QRadar SOAR

Hi IBM SOAR community,

I have question regarding the utility function specifically the REST API call functionality where currently the api call is not responsive. The script I used in the playbook for the api call is the same that I have used in January this year, however as I see there has been some update to the package and is it possible that the changes made the API call unresponsive?

I have tested the same API url and headers using API client like postman and it able to return response in fairly quick manner so I assume the underlying problem would be with my script below (which should have no problem since it work before )

Any clue on what fix I  should apply, or is there any package with requests library that replace this utility functions. Any help is greatly appreciated.

Hi Luqman -- I would be happy to help, but first I think you should remove this post and rotate your authorization key as you only blurred out the key in the first instance, I can still see it in the second header value. Would you please remove that and repost your question before we go forward? In the meantime, I'll have a look at what you've posted so far and I can try my best to get a response to you soon once you start a new thread.

------------------------------
Bo Bleckel

Original Message:
Sent: Tue May 02, 2023 09:47 PM
From: Luqman Nur
Subject: SOAR utility functions : REST API call is not responsive

Hi IBM SOAR community,

I have question regarding the utility function specifically the REST API call functionality where currently the api call is not responsive. The script I used in the playbook for the api call is the same that I have used in January this year, however as I see there has been some update to the package and is it possible that the changes made the API call unresponsive?

I have tested the same API url and headers using API client like postman and it able to return response in fairly quick manner so I assume the underlying problem would be with my script below (which should have no problem since it work before )

Any clue on what fix I  should apply, or is there any package with requests library that replace this utility functions. Any help is greatly appreciated.

------------------------------
Luqman Nur
Techlab
------------------------------

Hi Luqman -- I would be happy to help, but first I think you should remove this post and rotate your authorization key as you only blurred out the key in the first instance, I can still see it in the second header value. Would you please remove that and repost your question before we go forward? In the meantime, I'll have a look at what you've posted so far and I can try my best to get a response to you soon once you start a new thread.

------------------------------
Bo Bleckel

Original Message:
Sent: Tue May 02, 2023 09:47 PM
From: Luqman Nur
Subject: SOAR utility functions : REST API call is not responsive

Hi IBM SOAR community,

I have question regarding the utility function specifically the REST API call functionality where currently the api call is not responsive. The script I used in the playbook for the api call is the same that I have used in January this year, however as I see there has been some update to the package and is it possible that the changes made the API call unresponsive?

I have tested the same API url and headers using API client like postman and it able to return response in fairly quick manner so I assume the underlying problem would be with my script below (which should have no problem since it work before )

Any clue on what fix I  should apply, or is there any package with requests library that replace this utility functions. Any help is greatly appreciated.

------------------------------
Luqman Nur
Techlab
------------------------------

Hi current update with the kubernetes cluster status, as I suspect the underlying issue stems from the incorrect configuration.


Is it possible that the current service pods have issues with communicating to the Apphost. I have also check the namespace for the pods and their respective logs, but the command return not found

------------------------------
Luqman Nur
Techlab

Original Message:
Sent: Wed May 03, 2023 09:16 AM
From: Bo Bleckel
Subject: SOAR utility functions : REST API call is not responsive

Hi Luqman -- I would be happy to help, but first I think you should remove this post and rotate your authorization key as you only blurred out the key in the first instance, I can still see it in the second header value. Would you please remove that and repost your question before we go forward? In the meantime, I'll have a look at what you've posted so far and I can try my best to get a response to you soon once you start a new thread.

------------------------------
Bo Bleckel

Original Message:
Sent: Tue May 02, 2023 09:47 PM
From: Luqman Nur
Subject: SOAR utility functions : REST API call is not responsive

Hi IBM SOAR community,

I have question regarding the utility function specifically the REST API call functionality where currently the api call is not responsive. The script I used in the playbook for the api call is the same that I have used in January this year, however as I see there has been some update to the package and is it possible that the changes made the API call unresponsive?

I have tested the same API url and headers using API client like postman and it able to return response in fairly quick manner so I assume the underlying problem would be with my script below (which should have no problem since it work before )

Any clue on what fix I  should apply, or is there any package with requests library that replace this utility functions. Any help is greatly appreciated.

------------------------------
Luqman Nur
Techlab
------------------------------

Hi Luqman -

Yes, that is most likely the issue. I would make sure that the app is running and you are able to run the app's test before running the REST API function.

Once you know that the app is properly configured and running, if you are still experiencing issues, please let me know.

Hi current update with the kubernetes cluster status, as I suspect the underlying issue stems from the incorrect configuration.


Is it possible that the current service pods have issues with communicating to the Apphost. I have also check the namespace for the pods and their respective logs, but the command return not found

------------------------------
Luqman Nur
Techlab

Original Message:
Sent: Wed May 03, 2023 09:16 AM
From: Bo Bleckel
Subject: SOAR utility functions : REST API call is not responsive

Hi Luqman -- I would be happy to help, but first I think you should remove this post and rotate your authorization key as you only blurred out the key in the first instance, I can still see it in the second header value. Would you please remove that and repost your question before we go forward? In the meantime, I'll have a look at what you've posted so far and I can try my best to get a response to you soon once you start a new thread.

------------------------------
Bo Bleckel

Original Message:
Sent: Tue May 02, 2023 09:47 PM
From: Luqman Nur
Subject: SOAR utility functions : REST API call is not responsive

Hi IBM SOAR community,

I have question regarding the utility function specifically the REST API call functionality where currently the api call is not responsive. The script I used in the playbook for the api call is the same that I have used in January this year, however as I see there has been some update to the package and is it possible that the changes made the API call unresponsive?

I have tested the same API url and headers using API client like postman and it able to return response in fairly quick manner so I assume the underlying problem would be with my script below (which should have no problem since it work before )

Any clue on what fix I  should apply, or is there any package with requests library that replace this utility functions. Any help is greatly appreciated.

------------------------------
Luqman Nur
Techlab
------------------------------

Hi Bo Bleckel -

I have correctly configured the updated api key and update the configuration under the Administration settings >  apps > app.config.However, there seems to be an issue with Apphost connection whereby after I call the function in a playbook it results to the Apphost connection being unreachable. Is this a common issue with apphost configuration.

Currently, this issue also affect setting up of new function package, as the option for deploy cannot be found.
Thanks for the follow up.

Hi Luqman -

Yes, that is most likely the issue. I would make sure that the app is running and you are able to run the app's test before running the REST API function.

Once you know that the app is properly configured and running, if you are still experiencing issues, please let me know.

Hi current update with the kubernetes cluster status, as I suspect the underlying issue stems from the incorrect configuration.


Is it possible that the current service pods have issues with communicating to the Apphost. I have also check the namespace for the pods and their respective logs, but the command return not found

------------------------------
Luqman Nur
Techlab

Original Message:
Sent: Wed May 03, 2023 09:16 AM
From: Bo Bleckel
Subject: SOAR utility functions : REST API call is not responsive

Hi Luqman -- I would be happy to help, but first I think you should remove this post and rotate your authorization key as you only blurred out the key in the first instance, I can still see it in the second header value. Would you please remove that and repost your question before we go forward? In the meantime, I'll have a look at what you've posted so far and I can try my best to get a response to you soon once you start a new thread.

------------------------------
Bo Bleckel

Original Message:
Sent: Tue May 02, 2023 09:47 PM
From: Luqman Nur
Subject: SOAR utility functions : REST API call is not responsive

Hi IBM SOAR community,

I have question regarding the utility function specifically the REST API call functionality where currently the api call is not responsive. The script I used in the playbook for the api call is the same that I have used in January this year, however as I see there has been some update to the package and is it possible that the changes made the API call unresponsive?

I have tested the same API url and headers using API client like postman and it able to return response in fairly quick manner so I assume the underlying problem would be with my script below (which should have no problem since it work before )

Any clue on what fix I  should apply, or is there any package with requests library that replace this utility functions. Any help is greatly appreciated.

------------------------------
Luqman Nur
Techlab
------------------------------

Hi Luqman Nur,

Could you check app host status from Administration settings >  apps page right side? You can post screenshot here (masking app host name if you want). Thanks.

Hi Bo Bleckel -

I have correctly configured the updated api key and update the configuration under the Administration settings >  apps > app.config.However, there seems to be an issue with Apphost connection whereby after I call the function in a playbook it results to the Apphost connection being unreachable. Is this a common issue with apphost configuration.

Currently, this issue also affect setting up of new function package, as the option for deploy cannot be found.
Thanks for the follow up.

Hi Luqman -

Yes, that is most likely the issue. I would make sure that the app is running and you are able to run the app's test before running the REST API function.

Once you know that the app is properly configured and running, if you are still experiencing issues, please let me know.

Hi current update with the kubernetes cluster status, as I suspect the underlying issue stems from the incorrect configuration.


Is it possible that the current service pods have issues with communicating to the Apphost. I have also check the namespace for the pods and their respective logs, but the command return not found

------------------------------
Luqman Nur
Techlab

Original Message:
Sent: Wed May 03, 2023 09:16 AM
From: Bo Bleckel
Subject: SOAR utility functions : REST API call is not responsive

Hi Luqman -- I would be happy to help, but first I think you should remove this post and rotate your authorization key as you only blurred out the key in the first instance, I can still see it in the second header value. Would you please remove that and repost your question before we go forward? In the meantime, I'll have a look at what you've posted so far and I can try my best to get a response to you soon once you start a new thread.

------------------------------
Bo Bleckel

Original Message:
Sent: Tue May 02, 2023 09:47 PM
From: Luqman Nur
Subject: SOAR utility functions : REST API call is not responsive

Hi IBM SOAR community,

I have question regarding the utility function specifically the REST API call functionality where currently the api call is not responsive. The script I used in the playbook for the api call is the same that I have used in January this year, however as I see there has been some update to the package and is it possible that the changes made the API call unresponsive?

I have tested the same API url and headers using API client like postman and it able to return response in fairly quick manner so I assume the underlying problem would be with my script below (which should have no problem since it work before )

Any clue on what fix I  should apply, or is there any package with requests library that replace this utility functions. Any help is greatly appreciated.

------------------------------
Luqman Nur
Techlab
------------------------------