I'm currently trying to run a query with the run UDM query action in the "Google Chronicle" integration. When testing my query in the siem search it works and it's returning results, but when I try to run it within this action in a playbook I get this odd error:
"Error executing action Google Chronicle - Execute UDM Query. Reason: SIEM tenant short-lived service account email not found in SOAR context."
Any help would be appreciated. Thanks!
Solved
Issue with "Google Chronicle - Run UDM Query" Action
+1Best answer by vanitharaj1208
Hi, This issue seems to be related to the integration you are using for your action.
You need to integrate Google Chronicle Integration. Check if all the parameters are passed and click on test.
Check if it is integrated.
+14- Silver 2
- Answer
Hi, This issue seems to be related to the integration you are using for your action.
You need to integrate Google Chronicle Integration. Check if all the parameters are passed and click on test.
Check if it is integrated.
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.