Related Answers
Download topic as PDF
Release Notes
Splunk SOAR Automation Broker allows you to run playbooks, actions, or connect to applications or assets in your on-premises environment from your Splunk SOAR (Cloud) deployment.
Splunk SOAR Automation Broker can be used to run playbooks, actions, or connect to applications or assets in segregated segments of your organization's network from your Splunk SOAR (On-premises) deployment.
What's new in Splunk SOAR Automation Broker
May 17, 2023
This release of Splunk SOAR Automation Broker includes the following enhancements:
| Feature | Description |
|---|---|
| Support for Podman | The containerization solution Podman can be used to install, run, and manage your Splunk SOAR Automation Broker. See these topics for additional information: |
February 22, 2023
This release of Splunk SOAR Automation Broker includes the following enhancements:
| Feature | Description |
|---|---|
| Automatic rotation for authentication keys | User authentication keys (also referred to as tokens) are now automatically rotated every 30 days. A process runs at 10 PM (of the paired SOAR deployment's local time) to identify and mark any of the user authentication keys which need to be reauthenticated, then new keys are sent via websocket from SOAR to the Automation Broker. No user intervention is required. |
December 14, 2022
This release of Splunk SOAR Automation Broker includes the following enhancements:
| Feature | Description |
|---|---|
| New UI for reauthorizing authentication keys | A new menu item was added to the user interface to get new credentials for Automation Brokers whose credentials have expired. See Rotate the encryption keys for the Splunk SOAR Automation Broker in Set Up and Manage the Splunk SOAR Automation Broker for more information. |
October 27, 2022
This release of Splunk SOAR Automation Broker includes the following enhancements:
| Feature | Description |
|---|---|
| Automatic update for Splunk SOAR Automation Broker | Once upgraded to this release, the Splunk SOAR Automation Broker can automatically upgrade itself when new versions are released. See Upgrade or update the Splunk SOAR Automation Broker in Set Up and Manage the Splunk SOAR Automation Broker. |
| Simplified install process | The process for installing and configuring the Splunk SOAR Automation Broker has been simplified. See Install Splunk SOAR Automation Broker. |
| Splunk SOAR Automation Broker available for Splunk SOAR (On-premises) | You can now use the Splunk SOAR Automation Broker in Splunk SOAR (On-premises) deployments. The Splunk SOAR Automation Broker acts to connect assets in complex network configurations to your Splunk SOAR (On-premises) instance. See Set Up and Manage the Splunk SOAR Automation Broker. |
September 28, 2022
This release of Splunk SOAR Automation Broker includes the following enhancements:
| Feature | Description |
|---|---|
| Removed Splunk Cloud Gateway dependency | The Splunk SOAR Automation Broker no longer requires Splunk Cloud Gateway to connect your on-premises services to your Splunk SOAR (Cloud) deployment. |
| Simplified the process for adding trusted certificates | If you have previously installed custom CA certificates for your Splunk SOAR Automation Broker, you must add them again. See: Add a Certificate Authority to the Splunk SOAR Automation Broker. |
| Notifications | The Splunk SOAR Automation Broker establishes a direct connection to your Splunk SOAR deployment to receive action notifications. |
| Configuration updates | The Splunk SOAR Automation Broker configuration will be automatically updated when a Docker image with a new version of Automation Broker is started. |
Known issues for Splunk SOAR Automation Broker
May 17, 2023
This release of the Splunk SOAR Automation Broker has no known issues.
February 22, 2023
This release of the Splunk SOAR Automation Broker has no known issues.
December 14, 2022
This release of the Splunk SOAR Automation Broker has no known issues.
October 27, 2022
This release of the Splunk SOAR Automation Broker has no known issues.
September 28, 2022
This release of the Splunk SOAR Automation Broker has no known issues.
Fixed issues for Splunk SOAR Automation Broker
May 17, 2023
This release of the Splunk SOAR Automation Broker includes fixes for the following issues:
| Date resolved | Issue number | Description |
|---|---|---|
| 2023-05-08 | PSAAS-12057 | Automation Broker (AB) configuration is ignored in the app editor. |
February 22, 2023
This release of the Splunk SOAR Automation Broker includes fixes for the following issues:
| Date resolved | Issue number | Description |
|---|---|---|
| 2023-02-14 | PSAAS-11401 | Automation Broker generates a high volume of extraneous audit log records. |
December 14, 2022
This release of the Splunk SOAR Automation Broker includes fixes for the following issues:
| Date resolved | Issue number | Description |
|---|---|---|
| 2022-11-29 | PSAAS-10965 | Upgrades to 5.4.0 are missing user_broker_version key value |
October 27, 2022
This release of the Splunk SOAR Automation Broker includes fixes for the following issues:
| Date resolved | Issue number | Description |
|---|---|---|
| 2022-10-04 | PSAAS-10265 | NMAP App not compatible with Automation Broker |
| 2022-10-13 | PSAAS-10250 | Automation Broker exhausts OS ulimits and stops processing actions |
|
NEXT About Splunk SOAR Automation Broker |
This documentation applies to the following versions of Splunk® Automation Broker: current
Feedback submitted, thanks!