Troubleshooting
Problem
Qradar と Resilient の統合環境では、Qradar のオフェンスにバックスラッシュ "\"が含まれている場合、そのオフェンスが Resilient へのエスカレートが失敗します。
"/store/log/circuits.log" (自動エスカレーション)または "/store/log/app.log" (手動エスカレーション)に以下のエラーが表示されます:
2018-10-23 12:07:19,131 ERROR [template_functions] Traceback (most recent call last):
File "/app/lib/template_functions.py", line 318, in render_json
value = json.loads(result)
File "/usr/local/lib/python2.7/site-packages/simplejson/_init_.py", line 516, in loads
return _default_decoder.decode(s)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 370, in decode
obj, end = self.raw_decode(s)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 400, in raw_decode
return self.scan_once(s, idx=_w(s, idx).end())
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 127, in scan_once
return _scan_once(string, idx)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 93, in _scan_once
_scan_once, object_hook, object_pairs_hook, memo)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 194, in JSONObject
value, end = scan_once(s, end)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 95, in _scan_once
return parse_array((string, idx + 1), _scan_once)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 250, in JSONArray
value, end = scan_once(s, end)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 93, in _scan_once
_scan_once, object_hook, object_pairs_hook, memo)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 194, in JSONObject
value, end = scan_once(s, end)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 90, in _scan_once
return parse_string(string, idx + 1, encoding, strict)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 99, in py_scanstring
raise JSONDecodeError(msg, s, end)
JSONDecodeError: Invalid \X escape sequence u'S': line 1 column 55 (char 54)
File "/app/lib/template_functions.py", line 318, in render_json
value = json.loads(result)
File "/usr/local/lib/python2.7/site-packages/simplejson/_init_.py", line 516, in loads
return _default_decoder.decode(s)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 370, in decode
obj, end = self.raw_decode(s)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 400, in raw_decode
return self.scan_once(s, idx=_w(s, idx).end())
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 127, in scan_once
return _scan_once(string, idx)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 93, in _scan_once
_scan_once, object_hook, object_pairs_hook, memo)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 194, in JSONObject
value, end = scan_once(s, end)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 95, in _scan_once
return parse_array((string, idx + 1), _scan_once)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 250, in JSONArray
value, end = scan_once(s, end)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 93, in _scan_once
_scan_once, object_hook, object_pairs_hook, memo)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 194, in JSONObject
value, end = scan_once(s, end)
File "/usr/local/lib/python2.7/site-packages/simplejson/scanner.py", line 90, in _scan_once
return parse_string(string, idx + 1, encoding, strict)
File "/usr/local/lib/python2.7/site-packages/simplejson/decoder.py", line 99, in py_scanstring
raise JSONDecodeError(msg, s, end)
JSONDecodeError: Invalid \X escape sequence u'S': line 1 column 55 (char 54)
Document Location
Worldwide
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSIP9Q","label":"IBM Security SOAR"},"Component":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions","Edition":"","Line of Business":{"code":"LOB77","label":"Automation Platform"}}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
19 April 2021
UID
ibm11100157