Currently, I have developed an action in my custom integration and added logs using siemplify.LOGGER object. When tested the action under the Testing tab, I see the logs under Debug Output tab and all's good.
But when I run the same action on any case from case wall, all I can see is the Output Message that was returned from the action. I could not find any way to look into the logs. The same case goes for the time when the action fails to execute successfully.
Could anyone please guide me to the correct way to look at the logs for the actions.
Thanks.
Solved
Need a way to find the logs of any action
+7- Bronze 5
Best answer by f3rz
Hi @f3rz I got to this documentation, and will try it. Thanks.
But what I meant is that do we have any way to view the logs of my performed actions anywhere on the SOAR platform itself ?
@preet_mehta unfortunately, it is not possible yet. For such view I would recommend you to open a Support Ticket for submitting Feature Request.
+10Hi @preet_mehta I believe this what could help you: https://cloud.google.com/chronicle/docs/soar/admin-tasks/advanced/retrieve-raw-python-logs
+7- Bronze 5
Hi @f3rz I got to this documentation, and will try it. Thanks.
But what I meant is that do we have any way to view the logs of my performed actions anywhere on the SOAR platform itself ?
+10Hi @f3rz I got to this documentation, and will try it. Thanks.
But what I meant is that do we have any way to view the logs of my performed actions anywhere on the SOAR platform itself ?
@preet_mehta unfortunately, it is not possible yet. For such view I would recommend you to open a Support Ticket for submitting Feature Request.
+7- Bronze 5
Sure, thanks for the suggestions.
I have an integration instance with SIEM and SOAR combined capabilities and have Admin rights. But when I hit https://{instance_url}/swagger/index.html URL, I receive 404.
Am I missing something ? And where can I find settings regarding Swagger.
Thanks.
+10@preet_mehta it seems to be an issue in SecOps (SOAR + SIEM) instances. Could you please open a Support Ticket for it?
+16You need to put the name of your url in where instance is.
it should like David.siemplify-soar..com/swagger/index.html
+7- Bronze 5
You need to put the name of your url in where instance is.
it should like David.siemplify-soar..com/swagger/index.html
Hi @dnehoda I did replace the {instance_url} with the actual instance URL in the link. It did not work. 😕😕
+16Hi @dnehoda I did replace the {instance_url} with the actual instance URL in the link. It did not work. 😕😕
private message me the link please.
+16Hi, can you suggest a way to DM you ?
I guess you can’t.
Are you sure it’s your SOAR - I’m guessing it’s not.
You find it through developer tools in chrome when look at a SOAR search.
Or I’ll take customer name please.
+7- Bronze 5
I guess you can’t.
Are you sure it’s your SOAR - I’m guessing it’s not.
You find it through developer tools in chrome when look at a SOAR search.
Or I’ll take customer name please.
Hey, I just went to the SOAR search tab and found the soar url you were probably talking about. I used that and I can access the swagger now !
Thanks a ton @dnehoda 🙏
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.