Skip to content

v12 - SOAR flows never trigger because event-processor is missing the /workdir/soar volume mount #2393

Description

@yllada

SOAR flows (Rules) created and enabled from the UI never trigger when a
matching alert comes in, and there is no error anywhere — no backend log,
no plugin log, no failed execution row. It just silently never runs.

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

No type

Projects

Status
👀 In review

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions