IBM Support

SOAR: Unable to create a previously delete Artifact Type

Troubleshooting


Problem

Error displayed creating a previously deleted artifact type at Customization Settings > Artifact Types in the IBM Security QRadar Security Orchestration, Automation, and Response (SOAR) server UI:
"API name has been used before. Please use a different name."

Symptom

Error creating an already deleted Artifact Type
 
Adding Artifact type

Cause

You inadvertently delete an Artifact Type. In this example, the Artifact Type is labeled Test Artifact.

Resolving The Problem

Example: ORG name = SOAR47 with ORG_ID 201, and Artifact Type name = Test Artifact.

  1. You need to gather the ORG_ID that you are working in 
    sudo -u postgres psql co3 -c "select org_id, org_name, org_workflow_tenant_id, org_enabled, org_parent_id, configuration_type from monapp.orgs order by org_id"
    sudo -u postgres psql co3 -c "select org_id, org_name, org_workflow_tenant_id, org_enabled, org_parent_id, configuration_type from monapp.orgs order by org_id"
could not change directory to "/root": Permission denied
 org_id |    org_name     |        org_workflow_tenant_id        | org_enabled | org_parent_id | configuration_type
--------+-----------------+--------------------------------------+-------------+---------------+--------------------
    201 | SOAR47          | aaaaaaaa-1111-2222-bbbb-cccccccccccc | t           |               |                  2
  2. Re-enable the deleted "Test Artifact" Assuming your ORG_ID = 201 
    sudo -u postgres psql -c "update monapp.incident_artifact_types set aty_enabled = true where aty_programmatic_name ='test_artifact' and org_id = 201" co3

UPDATE 1
Results
The Artifact is now back in the list of Artifact Types.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSA230","label":"IBM Security QRadar SOAR"},"ARM Category":[{"code":"a8m0z000000cwRVAAY","label":"Resilient Core-\u003EArtifacts"}],"ARM Case Number":"TS011485241","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
31 January 2023

UID

ibm16857269

Page Feedback