This article provides a solution for the issue where a Custom Action Script is unable to resolve the host name when triggered from the console.

 The Script being used by the Custom Action is attempting to communicate to a Host Name.

If you have verified the Script works when using an IP address instead of a Host Name, modify the /opt/qradar/bin/ca_jail/etc/resolv.conf to match /etc/resolv.conf on the Managed Host and add any additional DNS servers as needed using this procedure.

1.  1. Using an SSH Session log in to the Console as root user.
2. 2. SSH from the Console to the Managed Host that is receiving the Events that are triggering the Custom Action Rule.
3. 3. Backup the jail shell resolv.conf file: using the command:
       cp /opt/qradar/bin/ca_jail/etc/resolv.conf /root/resolv.conf.bak
4. 4. Copy the /etc/resolv.conf to the jail shell using the command:
      cp /etc/resolv.conf /opt/qradar/bin/ca_jail/etc/resolv.conf

Results: Custom Action Scripts that are run from the updated Managed Host should be able to resolve Host Names correctly now.