IBM Support

Qradar SOAR: API Key Account Secret Expiration in 7 Days

Troubleshooting


Problem

Received an email stating API Key Account Secret Expiration in 7 Days, however, based on the email message, it is hard to determine which application is being referenced.

 

Symptom

Example email:
One or more API key account secrets are expiring within 7 days. Please regenerate the secret for each account then update any apps or custom applications using the account to match the regenerated key.
Please login using the link below:
https://SOAR_URL/#email?org=201&apiKeys=8

Diagnosing The Problem

 

 

Resolving The Problem

Use the Interactive REST API to find the application mapped to the API Key (apiKeys=8) mentioned in the received email.
1) login to the SOAR UI, open the pull down menu and choose Help/for Contact
2) under the API Tools for Developers heading, click on Interactive REST API
3) go to ApiKeyREST
4) choose GET /orgs/{org_id}/apikeys
5) scroll down and click Execute
6) the server response is shown in the Response body
7) using the example email shown above, search in the Response body for "id": 8
Among other details you will see:
"apikey_id": "68a9c37c-44cc-4a87-8e10-cebe61e41c9b"
"description": "API Key created for app SOAR LDAP Utilities for executable fn_ldap_utilities.", 
"display_name": "SOAR LDAP Utilities"

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB24","label":"Security Software"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSA230","label":"IBM Security QRadar SOAR"},"ARM Category":[{"code":"a8m0z000000cvuvAAA","label":"Integrations-\u003EAPI"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]

Document Information

Modified date:
26 April 2024

UID

ibm17149334