Issues Fixed in Incident Responder i56.6


ACTN-3740	You couldn't configure Elasticsearch as a service and received a Failed to connect to Elasticsearch: Expecting value error. The Elasticsearch API uses both HTTP and HTTPS, but the Exabeam actions for the Elasticsearch service only supported HTTP, not HTTPS. Now, the actions support both HTTP and HTTPS. Instead of entering the host and port in separate fields, you enter the uniform resource identifier (URI) scheme, host, and port under a single field, Base URL.
ACTN-3754, SOAR-12659	Cisco Umbrella Investigate's Get URL Reputation action failed to run: you didn't see any outputs in the workbench or you received a 403 Client Error. This issue occurred if your API key can't batch request information about multiple domains at once. Now, when you configure Cisco Umbrella Investigate as a service, you must select whether your API key type allows batch requests. If you previously configured Cisco Umbrella Investigate as a service, after you upgrade to i56.6, reconfigure the service to select this setting. To determine whether your API key type allows batch requests, contact Cisco technical support services.

ACTN-3740

You couldn't configure Elasticsearch as a service and received a Failed to connect to Elasticsearch: Expecting value error. The Elasticsearch API uses both HTTP and HTTPS, but the Exabeam actions for the Elasticsearch service only supported HTTP, not HTTPS. Now, the actions support both HTTP and HTTPS. Instead of entering the host and port in separate fields, you enter the uniform resource identifier (URI) scheme, host, and port under a single field, Base URL.

ACTN-3754, SOAR-12659

Cisco Umbrella Investigate's Get URL Reputation action failed to run: you didn't see any outputs in the workbench or you received a 403 Client Error. This issue occurred if your API key can't batch request information about multiple domains at once. Now, when you configure Cisco Umbrella Investigate as a service, you must select whether your API key type allows batch requests. If you previously configured Cisco Umbrella Investigate as a service, after you upgrade to i56.6, reconfigure the service to select this setting. To determine whether your API key type allows batch requests, contact Cisco technical support services.

Incident ResponderIncident Responder Documentation

Table of ContentsTable of Contents

Issues Fixed in Incident Responder i56.6