question

LopamudraBhattacharjee-5217 avatar image
0 Votes"
LopamudraBhattacharjee-5217 asked JamesTran-MSFT commented

MSTICPY config https://stackoverflow.com/questions/60160686/syntaxerror-in-jupypter-notebook-for-msticpy-queryproviderfile Error

Getting an error while setting up the MSTICPy Configuration. On running the code below I am getting an error ValueError: File not found: 'None'.

from msticpy.config import MpConfigEdit
import os

mp_conf = "msticpyconfig.yaml"

check if MSTICPYCONFIG is already an env variable

mp_env = os.environ.get("MSTICPYCONFIG")
mp_conf = mp_env if mp_env and Path (mp_env).is_file() else mp_conf

if not Path(mp_conf).is_file():
print(
"No msticpyconfig.yaml was found!",
"Please check that there is a config.json file in your workspace folder.",
"If this is not there, go back to the Microsoft Sentinel portal and launch",
"this notebook from there.",
sep="\n"
)
else:
mpedit = MpConfigEdit(mp_conf)
mpedit.set_tab("AzureSentinel")
display(mpedit)

microsoft-sentinel
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@LopamudraBhattacharjee-5217
Thank you for your post and I apologize for the delayed response!

When it comes to the error message you're seeing, if you're running the code cell in the Setting up the notebook environment section of your notebook. The configuration warnings about missing settings in the msticpyconfig.yaml file are expected since you haven't configured anything yet.

To gain a better understanding of your issue, can you share any documentation that you're following to implement MSTICPy in Microsoft Sentinel?



Any additional information or screenshots would be greatly appreciated.
Thank you for your time and patience throughout this issue.

0 Votes 0 ·

Thanks for responding @JamesTran-MSFT however I believe this is an issue with the latest version of MSTICPy & has got nothing to do with me setting up the environment. Ian Hellen has confirmed & Pete Bryan is looking into it at the moment. Following are the links to the git issues raised:

https://github.com/microsoft/msticpy/issues/398
https://github.com/microsoft/msticpy/issues/393

0 Votes 0 ·
JamesTran-MSFT avatar image JamesTran-MSFT LopamudraBhattacharjee-5217 ·

@LopamudraBhattacharjee-521
Thank you for following up on this! Since you're working directly with our PG team on this, I'll continue to monitor your thread and update the solution as needed.


If you have any other questions, please let me know.
Thank you again for your time and patience throughout this issue!

0 Votes 0 ·

0 Answers