IBM Support

(参考) バックスラッシュ "\"がオフェンスに存在するため、Qradar オフェンスのエスカレートが失敗する

Troubleshooting


Problem

Qradar と Resilient の統合環境では、Qradar のオフェンスにバックスラッシュ "\"が含まれている場合、そのオフェンスが Resilient へのエスカレートが失敗します。
"/store/log/circuits.log" (自動エスカレーション)または "/store/log/app.log" (手動エスカレーション)に以下のエラーが表示されます:
2018-10-23 12:07:19,131 ERROR [template_functions] Traceback (most recent call last):
File "/app/lib/template_functions.py", line 318, in render_json
value = json.loads(result)
File "/usr/local/lib/python2.7/site-packages/simplejson/_init_.py", line 516, in loads
return _default_decoder.decode(s)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 370, in decode
obj, end = self.raw_decode(s)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 400, in raw_decode
return self.scan_once(s, idx=_w(s, idx).end())
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 127, in scan_once
return _scan_once(string, idx)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 93, in _scan_once
_scan_once, object_hook, object_pairs_hook, memo)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 194, in JSONObject
value, end = scan_once(s, end)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 95, in _scan_once
return parse_array((string, idx + 1), _scan_once)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 250, in JSONArray
value, end = scan_once(s, end)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 93, in _scan_once
_scan_once, object_hook, object_pairs_hook, memo)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 194, in JSONObject
value, end = scan_once(s, end)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 90, in _scan_once
return parse_string(string, idx + 1, encoding, strict)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 99, in py_scanstring
raise JSONDecodeError(msg, s, end)
JSONDecodeError: Invalid \X escape sequence u'S': line 1 column 55 (char 54)

Document Location

Worldwide

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSIP9Q","label":"IBM Security SOAR"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]

Log InLog in to view more of this document

This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.

Document Information

Modified date:
19 April 2021

UID

ibm11100157