When i try to pulling log on Qradar i got a error. I checked parameters is corret. annd logged in the “https://eu.epm.cyberark.com/login” with api users but i got this error: ” ERROR: /get_access_token/body/ManagerURL is not valid”
I used these workflow.xml(AggregatedPolicy, AggregatedEvents, AdminAudits) and parameter values: https://github.com/IBM/IBM-QRadar-Universal-Cloud-REST-API/tree/master/Community%20Developed/CyberArk%20EPM
Here is the cli outputs:
[root@xxx CyberArk EPM – RestAPI]# /opt/qradar/bin/test-workflow.sh -w workflow.xml -wp parameters.xml
2024-08-14 12:56:23 [INFO ][UniversalCloudRESTAPITest] Status cleared.
2024-08-14 12:56:23,545 [QRADAR] [main] com.q1labs.semsources.sources.universalcloudrestapi.v1.workflow.action.LogAction: [INFO] [NOT:0000006000][-/- -] [-/- -]EPM::AdminAudit – The EPM Bookmark value was 1723542983509 : 2024-08-13T09:56:23.509Z
2024-08-14 12:56:24,605 [QRADAR] [main] com.q1labs.semsources.sources.universalcloudrestapi.v1.workflow.action.LogAction: [INFO] [NOT:0000006000][-/- -] [-/- -]EPM::AdminAudit – 200 : OK.
2024-08-14 12:56:24 [INFO ][UniversalCloudRESTAPITest] Status changed to ERROR: /get_access_token/body/ManagerURL is not valid
Suggestion for solution