IBM Security QRadar SOAR

 View Only

  • 1.  Unable to save playbook

    Posted Thu June 16, 2022 03:11 PM

    When trying to save (after editing), disabling, or deleting my playbook I am getting the following error: 

    Error!

    The configuration references one or more invalid function inputs: XXXXXXXXXXXXXXXXXXXXX

    Has anyone faced a similar issue? What logs would you recommend looking at to diagnose this playbook issue?

    Thanks,

    Mark



    ------------------------------
    Mark Aksen
    ------------------------------


  • 2.  RE: Unable to save playbook

    Posted Fri June 17, 2022 03:13 AM
    Hi Mark,

    There is a known issue that when a filed is deleted from a function that is pre-added to a playbook, you will see the exact error when you try to save the playbook again.
    The workaround is: in the playbook, edit the fields of the problematic function (e.g., modify one of the static value) or, remove and re-add the function, then you should be able to save the playbook. Sorry for the inconvenience it will be fixed in the next release.

    Thanks.

    ------------------------------
    Gilbert Liao
    ------------------------------

    Original Message