Welcome to Splunk Phantom 4.10.4

If you are new to Splunk Phantom, read About Splunk Phantom in the Use Splunk Phantom manual to learn how you can use Splunk Phantom for security automation.

Begin your Splunk Phantom installation by reviewing the following documentation:

• Known issues in this release of Splunk Phantom
• How can Splunk Phantom be installed? in the Install and Upgrade Splunk Phantom manual.
• General system requirements in the Install and Upgrade Splunk Phantom manual.

Planning to upgrade from an earlier version?

If you plan to upgrade to this version from an earlier version of Splunk Phantom, read Prepare your Splunk Phantom deployment for upgrade in the Install and Upgrade Splunk Phantom manual.

Splunk Phantom requires incremental upgrades from earlier versions. Do not skip any required versions when upgrading Splunk Phantom.

These release notes are in addition to the release notes for Splunk Phantom 4.10.0, Splunk Phantom 4.10.1, Splunk Phantom 4.10.2, and Splunk Phantom 4.10.3

What's new in 4.10.4

This release of Splunk Phantom includes the following enhancements.

New Feature or Enhancement	Description
Increased the default number of Python 3 runners	A new installation of Splunk Phantom 4.10.4 starts with four Python 3 runners and one Python 2 runner. Instances of Splunk Phantom upgraded from earlier 4.10 releases will use number of runners set in Main Menu > Administration > Administration Settings > Playbook Execution before the upgrade. See Run playbooks in parallel with vertical scaling in Administer Splunk Phantom for more information on running playbooks in parallel.
Improved scope handling for playbook authors	Multiple Visual Playbook Editor block types have been updated to help playbook authors. Playbook authors can use new interface elements for setting scope, setting delimiters, dropping None values, and setting case sensitivity on specific block types. For specific changes to each block, see the block description in Build Playbooks with the Visual Editor. Action Block - see Add an Action block to a Splunk Phantom playbook. Filter Block - see Use filters to separate Splunk Phantom artifacts before further processing. Decision Block - see Use decisions to send Splunk Phantom artifacts to a specific downstream action. Format Block - see Customize the format of your Splunk Phantom playbook content. Prompt Block - see Require user input to continue running the Splunk Phantom playbook. Legacy Custom Function Block - see Add custom code to your Splunk Phantom Playbook with the legacy custom function block. Custom Function Block - see Add custom code to your Splunk Phantom playbook with the custom function block.