Issue with "Google Chronicle - Run UDM Query" Action

[Daniel_Acevedo]

I'm currently trying to run a query with the run UDM query action in the "Google Chronicle" integration. When testing my query in the siem search it works and it's returning results, but when I try to run it within this action in a playbook I get this odd error:

"Error executing action Google Chronicle - Execute UDM Query. Reason: SIEM tenant short-lived service account email not found in SOAR context."

Any help would be appreciated. Thanks!

[vanitharaj1208 · Accepted solution]

Hi, This issue seems to be related to the integration you are using for your action.

You need to integrate Google Chronicle Integration. Check if all the parameters are passed and click on test.

Check if it is integrated.