Known issues for

Release 6.1.1

Date filed	Issue number	Description
2024-03-13	PSAAS-16695	VPE: Action block using Splunk app marked unconfigured when optional parameters not specified
2024-02-22	PSAAS-16477	Podman does not currently work with redirected image URLs due to Docker Hub authentication token changes Workaround: Manually change the image: line in docker-compose.yaml to point to docker.io/phantomsaas/automation_broker:<$SOAR_VERSION>.
2024-02-15	PSAAS-16431, PSAAS-16963, PSAAS-16962	Automation Broker: Actions intermittently hang for Automation Broker when there are connection issues Workaround: # Check if the action completed successfully Cancel the hanging action If the action did not complete successfully, re-run the action.
2024-01-30	PSAAS-16206	Global Environment Variables are incorrectly applied by the Automation Broker when the variable is named in all lowercase letters. Workaround: Use uppercase letters only.
2023-12-11	PSAAS-15750	VPE: Downstream block invoked twice from two upstream code blocks join Workaround: Detach one of the upstream blocks and run the blocks in sequence to avoid a join.
2023-12-06	PSAAS-15694	Indicators page shows empty table for non-admin users
2023-11-29	PSAAS-15638	Paginating REST APIs without sorting may give duplicate results across pages. Also affects phantom.get_tasks() and phantom.get_notes() playbook APIs, when containers have >10 tasks or >10 notes, respectively Workaround: If using the REST API directly, add a sort parameter to the URL: https://example-soar.com/rest/resource?page=X&sort=id If using the phantom.get_tasks() or phantom.get_notes() playbook APIs, you can use phantom.requests instead to query the REST API directly: # Instead of phantom.get_tasks(), use url = phantom.build_phantom_rest_url('workbook_task') # Or, instead of phantom.get_notes(), use url = phantom.build_phantom_rest_url('note') params = {'_filter_container': container['id'], 'page_size': 0, 'sort': 'id'} response = phantom.requests.get(url, params=params) tasks = response.json()['data']
2023-10-18	PSAAS-15086	cluster upgrade failing on DatabaseSchema with 'Failed to apply database migrations' Workaround: Contact Splunk Support.
2023-10-06	PSAAS-14969	Update from source control of external repo to pull a new Custom Function also creates a new playbook Workaround: To avoid this issue: When using Update From Source Control, always select Force Update. If you have already encountered this issue: You have playbooks you didn't create, with names very similar to the custom function name, like custom_functions/<my_custom_function>. Do not delete these extra playbooks, because that will also delete the custom function. Delete the Source Control repository and recreate it to remove the extra playbooks.
2023-10-04	PSAAS-14948	"validate parameters" button in action modal says "save" instead
2023-09-25	PSAAS-14869	Only draft app shows as runnable when searching to run apps "by app"
2023-09-20	PSAAS-14850	Cluster upgrades hang for 15 minutes while the UpdateRabbitMQServerCert task unnecessarily attempts to connect to the database, then continues successfully Workaround: Do one of these: Wait the extra 15 minutes Open a new terminal to the same instance on which the stalled upgrade is running then run the command phsvc start pgbouncer to start pgBouncer.
2023-09-20	PSAAS-14855	The migration tool for privileged to unprivileged SOAR does not retain known_hosts file. Workaround: If any git repos are failing to sync after an privileged to unprivileged migration, follow the steps in Set up a playbook repository using SSH from Configure a source control repository for your Splunk SOAR (On-premises) playbooks in Administer Splunk SOAR (On-premises). These steps will add the git server to the known_hosts file of the phantom user in SOAR.
2023-09-15	PSAAS-14790	The make_cluster_node script fails on new cluster with a PGSQL 15 database.
2023-09-14	PSAAS-14784	SOAR gives a "502 bad gateway" error for all SAML logins if a metadata endpoint fails to respond.
2023-09-08	PSAAS-14740	In App editor, Console output is not visible properly in Dark Theme
2023-09-05	PSAAS-14697, PSAAS-14655, PAPP-32725	Images are not appearing in action's custom view on SOAR (Cloud) and (On-premises) versions 6.1.1 and higher
2023-08-29	PSAAS-14627	VPE: Code from one utility block might be copied into another utility block in the same playbook Workaround: In the Python Playbook Editor of the VPE, manually edit the affected blocks to remove duplicate codes. To keep track of changes you make, clone the playbook before each edit.
2023-08-21	PSAAS-14504	Freshly installed SOAR cluster doesn't have any phantom_scheduler jobs
2023-07-19	PSAAS-14130, PSAAS-14128	Cluster node creation/upgrade may fail due to RabbitMQ cli commands failing to connect to RabbitMQ server
2023-07-18	PSAAS-14116	App Editor Console Output has black fonts in dark theme Workaround: Use the light theme. Click your account name on the top right, then select Account Settings. Select the Light Theme, then select Save Changes.
2023-06-27	PSAAS-13913	VPE: After clicking Discard Changes button, blocks show error "Reconfigure Invalid Data Path" Workaround: Need to not save the playbook and refresh the page
2023-05-22	PSAAS-13496	App Editor: Setting default app action booleans to 'false' does not work.
2023-03-07	PSAAS-12591	VPE: Artifact labels in datapaths are not universally supported Workaround: Use a format block to convert datapath results to strings then use the format block's output as the input to downstream action blocks.
2022-04-08	PSAAS-8541	Unreadable characters sporadically appear in UI Workaround: Refresh the browser to reload the page.