splunk-soar-connectors / proofpoint

Apache License 2.0
2 stars 4 forks source link

get _get_forensic_data method is failing #7

Open iqbalcrat opened 10 months ago

iqbalcrat commented 10 months ago

Name of the app ProofPoint TAP version 2.0.2 in Splunk SOAR

Describe the bug Whenever I try to execute the action "get forensic" or "get forensic data" I am getting the below error "status":"failed","message":"handle_action exception occurred. Error string: '_get_forensic_data() takes 2 positional arguments but 3 were given'"}]

To Reproduce Steps to reproduce the behavior:

  1. Go to any event
  2. Click on Actions -> select Proofpoint app -> select get forensic action
  3. give threat id or campaign id (either of these two)
  4. click on save and the launch
  5. fails with the above error
  6. Even if we leave both the threat id and campaign id blank, still it throws the same error

Expected behavior It should get the forensic data of that threat id

Screenshots If applicable, add screenshots to help explain your problem.

Splunk SOAR Version (please complete the following information):

Additional context Add any other context about the problem here.

bneises commented 9 months ago

To extend the issue: Both get campaign and get forensic actions are supposed to replace deprecated versions of the actions get campaign data and get forensic data respectively, but the call to the original action has too many arguments.