Log bundle extraction issue with System Diagnostics and Health Check

[Arpan_C]

Hi All,

Is there anyone faced below issues with the content pack "System Diagnostics and Health Check" (#System Diagnostics and Health Check | Cortex XSOAR (pan.dev)) while running the main playbook 'Health Check > Health Check - Collect Log Bundle'.

1. The main playbook 'Health Check' successfully invokes sub-playbook 'Health Check - Collect Log Bundle'.

2. The sub-playbook then able to download log bundle 

3. However, unpack task isn't able to extract files and showing error "File not found". Whereas, file's entryID mapped as expected

4. Tried to download the file on my local machine, while extracting manually it seems a password protected archive

5. Is this could be possible reason the 'UnPack the zipped log file' fails ? If so, what would be the default password ? and if there is any plan to modify the out-of-the-box playbooks ?

I have tested the Core REST API integrations and it is working fine with API key having 'Instance Admin' role. We are running on Cortex XSOAR V8.5. 

Please let me know if anyone has encountered this before and what was the fix if you have?

[Ivetto]

Hello,

The health check pack is not going to work on XSOAR 8 as there are no log bundles supported for XSOAR 8 cloud.

[Arpan_C]

Thank you for the information.😊

In that case, is there any alternatives of this pack for monitoring XSOAR 8 cloud. Also, can this information be updated on the original article OR github page?

[Ivetto]

Could you share the article and Github pages were you found this information?

[Arpan_C]

Article: https://xsoar.pan.dev/docs/reference/packs/system-diagnostics-and-health-check

Github page: content-docs/content-repo/extra-docs/packs/SystemDiagnosticsHealthCheck.md at master · demisto/conte...

[Ivetto]

I have some good news, it seems we will be implementing log bundles in one of the next few versions of XSOAR 8. It is still not official but when it is, I will be working with the documentation team to update these articles. Thank you for your patience. I will be sure to confirm here so you could also make use of these troubleshooting tools.

[Sig_9]

I would love for the progress of this feature in https://xsoar.ideas.aha.io/ideas/