Darktrace Connector not ingesting cases

[Antonino_La2]

Hi everyone, 

we configured the Darktrace model breach connector on our SOAR instance. Performing tests all works fine but we got zero cases created.

Enabling logging we can't see any log coming from the connector... This is such weird behavior since I can't see any error. Has anyone here had the same problem? 

Thanks

A

[SoarAndy]

• If the 'test' works, but no cases are ingested, I would look at the config:
  are you looking back long enough (Max Hours Backwards)
• are you ingesting low enough severity (Lowest Model Breach Score To Fetch)
• can you check the API key you created has access/rbac/etc to the alerts

Going to the "Logs" page and enabling this whilst you run some 'Testing' connections might help