Known issues in this release of Splunk Phantom

The following are issues and workarounds for the 4.10 release versions of Splunk Phantom.

Date filed	Issue number	Description
2021-04-09	PPS-25693	Python3 playbook converter fails when there is custom function block without custom code Workaround: Either remove the empty function block or add temporary code to the empty function block before converting the playbook.
2021-03-31	PPS-25665	ibackup restore does not restore splunk portion of license key Workaround: re-apply the original license key to the restored-to machine.
2021-03-29	PPS-25655	Python3 playbook converter: Issues in converting code in playbook's global block.
2021-03-26	PPS-25650	Converting some Python 2 playbooks to Python 3 with playbooks_to_py3 utility fails. Workaround: If converting a Python 2 playbook fails do the following: Open the Python 2 playbook in the Visual Playbook Editor. Click the Edit Playbook button. Click the Save button. Run the playbooks_to_py3 utility again.
2021-03-26	PPS-25639	Playbooks aren't running as they fail to pass validation
2021-03-25	PPS-25634, PSAAS-2292, PORT-484	"Error" in web interface and "ERROR: App install failed" in wsgi.log when updating Apps on a release of Splunk Phantom with a lower minor version number than the final release for that version. Workaround: If you receive this error, take the following steps: 1. Upgrade to the latest Splunk Phantom platform release. Use the --without-apps option. See: Splunk Phantom upgrade overview and prerequisites Upgrade a single Splunk Phantom instance Upgrade a single unprivileged Splunk Phantom instance Upgrade a Splunk Phantom cluster Upgrade an unprivileged Splunk Phantom Cluster 2. Once the Splunk Phantom platform upgrade is complete, upgrade your installed Apps upgraded using the Main Menu > Apps, then clicking the APP UPDATES button.
2021-03-19	PPS-25613	UI : Timestamps are one hour off after daylight savings.
2021-03-11	PPS-25600	Playbook API phantom.debug crashes when passed non-pickleable objects
2021-03-09	PPS-25592	Running an action or playbook on a task incorrectly opens the task details view.
2021-03-02	PPS-25566	System health page not loading; "TypeError: Cannot read property 'memory' of undefined"
2021-03-01	PPS-25563	Phantom.get_phase() with input argument container object does not work
2021-02-25	PPS-25551	During Phantom cluster upgrade from 4.9 to 4.10 releases does not generate correct certificates Workaround: Restore the certificates from the backup made during the upgrade. Do these steps on each Splunk Phantom node. SSH to the Splunk Phantom node. Stop Splunk Phantom. /<PHANTOM_HOME>/bin/stop_phantom.sh Change directory to <PHANTOM_HOME>/etc/consul/ssl/ca/ Rename cacert.pem.bak.<date/time> to cacert.pem mv cacert.pem.bak.<date/time> cacert.pem Rename privkey.pem.bak.<date/time> to privkey.pem mv privkey.pem.bak.<date/time> privkey.pem Restart Splunk Phantom. /<PHANTOM_HOME>/bin/start_phantom.sh
2021-02-22	PPS-25533	Decided runners erroneously validate playbooks on startup
2021-02-18	PPS-25507	ibackup incorrectly identifies space requirements
2021-02-05	PPS-25465	When changing container status while audit logging is on, generates errors "Cannot retrieve status name for container audit record" and "KeyError: 'old_value_id'".
2021-02-01	PPS-25437	Benign error during installation: "Could not open local rpm file: DIST/x86_64/phantom_unp-4.10.1.45056-1.x86_64.rpm: RPM Error opening Package"
2021-02-01	PPS-25419	"Skipping unreadable repository" error appears during migration from privileged to unprivileged system
2021-01-18	PPS-25333	Search index 'phantom_app_run' is indexing duplicate records.
2021-01-12	PPS-25300	Large number of prompt notifications could reach database connection limit Workaround: unknown
2020-12-22	PPS-25250	In the Investigation screen, the Action overlay loads very slowly, and is not paginated
2020-12-21	PPS-25246	Filter block and decision block do not return correct result when called multiple times on the same chain of action results
2020-12-11	PPS-25216	When using the "Related Event" item from the artifact info screen in Investigation, produces error 'indicator_value 404 Not found' then displays a never-ending 'loading history' message
2020-11-30	PPS-25111	Creating an artifacts with a cef_name that contains a space crashes JS when viewing the artifact.
2020-11-18	PPS-25038	Boolean parameter 'Verify server certificate' is treated as 'None' by the Splunk Phantom platform.
2020-06-15	PPS-23462	Playbook API collect_from_contains fails to return data from user-defined and regular CEF types