Welcome to Splunk Phantom 4.10.1

If you are new to Splunk Phantom, read About Splunk Phantom in the Use Splunk Phantom manual to learn how you can use Splunk Phantom for security automation.

Begin your Splunk Phantom installation by reviewing the following documentation:

• Known issues in this release of Splunk Phantom
• How can Splunk Phantom be installed? in the Install and Upgrade Splunk Phantom manual.
• General system requirements in the Install and Upgrade Splunk Phantom manual.

Planning to upgrade from an earlier version?

If you plan to upgrade to this version from an earlier version of Splunk Phantom, read Prepare your Splunk Phantom deployment for upgrade in the Install and Upgrade Splunk Phantom manual.

Splunk Phantom requires incremental upgrades from earlier versions. Do not skip any required versions when upgrading Splunk Phantom.

These release notes are in addition to the release notes for Splunk Phantom 4.10.0.

What's new in 4.10.1

This release of Splunk Phantom includes the following enhancements.

New Feature or Enhancement	Description
Vertical scaling for playbooks	Splunk Phantom supports vertical scaling for playbook execution. The DECIDED daemon now spawns a number of runners when started. Each runner is a dedicated instance of either the Python 2 or Python 3 runtime environment. The default is one runner for Python 2 and one runner for Python 3. If multiple runners are specified in Main Menu > Administration > Administration Settings > Playbook Execution, DECIDED spawns that many runners for each Python version when it starts. See Run playbooks in parallel with vertical scaling for more information. When playbooks are run in parallel, data inconsistency can occur in operations that store data. To prevent potential data inconsistencies, playbooks should use the save_object() API with the keys playbook_name and container_id instead of using the deprecated save_data() API.
Deprecated playbook APIs	Several playbook APIs related to saving data from playbook runs have been deprecated. This table shows the deprecated APIs and their supported replacements. Deprecated API Supported API clear_data clear_object get_data get_object save_data save_object