parse error: " in non-quoted-field on list [phishing-inprocessHashList]

Showing results for 
Show  only  | Search instead for 
Did you mean: 

parse error: " in non-quoted-field on list [phishing-inprocessHashList]

L2 Linker



I encountered a parsing error while running the phishing playbook with the previously reported email. sharing the steps and input data for better understanding of this issue.


"Check Mail Hash In Process or Not" Playbook steps: 
1. Set HashIncidentCount to -1
2. Format Mail Hash
3. Get InProcess List
4. Get Incident ID
5. Get Incident Count
6. Check If Record Exists--->
If YES: Set New Incident Count
     Remove Existing Record for In Process State
    (listName: phishing-inprocessHashList
       listData: ${FormattedHash}/${HashIncidentID}/${HashIncidentCount}
       parse error on line 1, column 292908: bare " in non-quoted-field on list [phishing-inprocessHashList]
     Update New Record for In Process State and Complete the playbook
If NO: Set HashIncidentCounterNew to -1 and Complete the playbook
Is there anyone who could provide assistance with this issue?

L5 Sessionator

Hi @Asmita.Asmita, the error is pretty clear, there is an extra double quote in the listData input. You will need to check the data first. Maybe run a transformer to for format the text properly. Something like the below.


Screenshot 2023-08-11 at 7.47.52 am.png




Thanks for addressing the issue But there is no quote in the listData input and getting the error.




In addition, In the builtin command also not showing any quote.




L5 Sessionator

Hi @Asmita.Asmita, can you share the context values for the below fields? Screenshot of the context will help.






Hi @jfernandes1 , sharing the snapshot:









L5 Sessionator

Hi @Asmita.Asmita, I still think there is something wrong with the list data. Could you check again? The error also mentions the location. line 1, column 292908


Not sure how much more help I can be, the command work for me. 

Screenshot 2023-08-14 at 5.04.18 pm.png

  • 6 replies
  • 31 Subscriptions
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!