Error with input field, before entering subplaybook, no running tasks in subplaybook, but QRadar query will called and performed.

assubramania — Wed, 14 Aug 2024 09:31:07 GMT

Please assist urgently.

Re: Error with input field, before entering subplaybook, no running tasks in subplaybook, but QRadar query will called and performed.

gmiguelvall — Tue, 20 Aug 2024 22:54:17 GMT

Dear @assubramania

Thank you for sharing the details of the issue with the "QRadar - Get Offense Logs" playbook in XSOAR. Based on the screenshots you provided, it seems that task #48 is encountering an error due to missing required inputs, specifically "ID" and "StartTime." This is preventing the sub-playbook from running as expected

Suggested Actions:

Identify the Source of the Inputs
Locate the Task(s) Assigning the ID and StartTime Values:Review the tasks before task #48 to ensure that both the "ID" and "StartTime" fields are properly populated. These should either come from a previous playbook task, a query result, or another automated action.
Verify Conditional Logic
Check Conditions: Ensure that any conditions leading up to task #48 are being met. For example, if the inputs are conditionally set, verify that all required conditions are satisfied to assign the "ID" and "StartTime" values.
Ensure Proper Data Mapping
Check Input Mappings: Verify that the playbook is correctly mapping the "ID" and "StartTime" variables. In the sub-playbook, confirm that these inputs are defined as mandatory inputs and that they are being passed from the main playbook correctly. Go to the sub-playbook settings (in this case, the sub-playbook for "QRadar - Get Offense Logs") and ensure that the "ID" and "StartTime" inputs are properly linked to the variables from the main playbook

Please let us know if these suggestions resolve the issue or if you need any further assistance please open a support case so we can better assist you.

Regards,

topic Re: Error with input field, before entering subplaybook, no running tasks in subplaybook, but QRadar query will called and performed. in Cortex XSOAR Discussions

Error with input field, before entering subplaybook, no running tasks in subplaybook, but QRadar query will called and performed.

Re: Error with input field, before entering subplaybook, no running tasks in subplaybook, but QRadar query will called and performed.