topic Re: Blueliv integration error in Cortex XSOAR Discussions

Blueliv integration error

miguel.tubia — Tue, 12 Apr 2022 21:43:07 GMT

Hi!

we are testing XSOAR capacities. For testing purposes, we are creating an integration with our intel solution, Blueliv:

When fetching it returns an error. From the mapping editor we get this:

>The request sent by the client was syntactically incorrect

We think that is something related with the date, the field "first_fetch_time". We fill in it using the format as in the help.

Do you have any experience using this integration? How do we fill in the field?

Thanks!

cstone — Tue, 12 Apr 2022 21:53:16 GMT

Be sure that the First fetch time is formatted in yyyy-mm-dd or yyyy-mm-ddThh:mm:ss. see my attached screenshot

miguel.tubia — Tue, 12 Apr 2022 21:54:52 GMT

Thanks for your response.

I have tried with "2022-04-01T00:00:00" and "2022-04-01".

The test button returns OK, and from any playbook I can execute commands, so I think that the rest of the parameters are OK.

cstone — Tue, 12 Apr 2022 21:58:46 GMT

where are you seeing this error?

miguel.tubia — Tue, 12 Apr 2022 22:01:26 GMT

Here for example:

and from the mapping Editor after selecting the instance:

miguel.tubia — Tue, 12 Apr 2022 22:55:22 GMT

OK, sorry, not date related issue.

In line 297, this line:

search_offset = demisto.getLastRun().get('offset', 0)

should be:

search_offset = demisto.getLastRun().get('offset', 1)

In order to not get an error from Blueliv API.

How can I send this issue to be fixed?