No action taken by the action endpoints of SIEM plugin

IdentityIQ (IIQ) IIQ Discussion and Questions
,
1

Which IIQ version are you inquiring about?

Version 8.2

Share all details related to your problem, including any error messages you may have received.

We have installed SIEM plugin and have tried using the Action endpoint to disable an identity.
We notice that an alert entry is created in identityiqPlugin.siem_alert table. However, no action taken on the identity and the identity is still active.

2

Hi @milinaphalke

Have you seen any error in logs?
Please activate following logs and provide the information retrieved

log4j.logger.com.sailpoints.siem=trace
3

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.