IBM Support

QRadar SOAR: Error ResilientSecurityException: Unauthorized call of function: sleep

Troubleshooting


Problem

Administrators who write scripts might notice that they get an error when they call a sleep function. The error might look similar to Error: ResilientSecurityException: Unauthorized call of function "sleep".

Resolving The Problem

For security issues, the sleep function is disabled. Programmers who use scripts need to be aware of the python functions that are supported within the SOAR platform. For more information about the supported Python functions, see Python 2 and Python 3 differences.
A method to get around this restriction is to use one of two methods:
The Timer and Utility functions are functions that can be used anywhere within a playbook, not just in another script. In QRadar SOAR, each timer function requires one thread. QRadar SOAR allows only 10 threads for each script. You might need to increase the number of threads in your [resilient] section of your app.config file. An example would be:
[resilient]
num_workers=50
Administrators can also use Timer Events from the UI.  For more information about Timer Events, see Using timer events.
Results
By using one of these methods you can introduce a delay into your script or application. If you need help writing your scripts use the SOAR forum.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSA230","label":"IBM Security QRadar SOAR"},"ARM Category":[{"code":"a8m0z000000cvfRAAQ","label":"Scripting"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
15 August 2023

UID

ibm16833514