Splunk® Phantom (Legacy)

Release Notes

This documentation does not apply to the most recent version of Splunk® Phantom (Legacy). For documentation on the most recent version, go to the latest release.

Fixed issues in this release of Splunk Phantom

Splunk Phantom 4.8, patch 1 (4.8.24304) was released on February 26, 2020. This release includes fixes for the following issues.

Date resolved Issue number Description
2020-02-20 PPS-21197, PPS-21614 The --delete-backup-group argument for ibackup.pyc now works correctly.
2020-02-14 PPS-21292 Fixed an issue where permitted_users_roles requests were being made for every websocket notification.
2020-02-24 PPS-21306 Fixed an issue that could result in the wrong version of NGINX being installed for online rpm installations or upgrades.
2020-02-13 PPS-21328 Fixed installation order so that all dependencies are properly installed before Splunk Phantom packages.
2020-02-13 PPS-21338 Appended additional dependency packages to offline installation TAR file for CentOS 7.
2020-02-20 PPS-21504 Custom fields named with spaces or special characters no longer generate errors when new custom fields are added.
2020-02-26 PPS-21557 Splunk Phantom now waits for PostgreSQL initialization before provisioning a virtual machine launched from from a virtual machine image.
2020-02-24 PPS-21622 Fixed an issue with assigning users with display names didn't work in prompt, task, or set owner blocks in the Visual Playbook Editor.
2020-02-21 PPS-21640 The compile_app.pyc script no longer crashes when a contains field is invalid or generates a warning.
2020-02-26 PPS-21670 Fixed an issue with entity_id formatting in SAML authentication.


Splunk Phantom 4.8.23319

Splunk Phantom 4.8 was released on January 30, 2020. This release addresses several security vulnerabilities and includes fixes for the following issues.

Date resolved Issue number Description
2019-12-06 PPS-20293 Backup and restore: Indicators are now correctly excluded from a config only backup
2019-12-09 PPS-19614 Notes no longer require Titles.
2020-01-09 PPS-18963 Phantom has upgraded to nginx version 1.17.7.
2019-11-12 PPS-18800 User's first and last names are used instead of usernames for Owner section of analyst view.
2019-12-10 PPS-18140 Phantom now correctly requests only the specified Vault ID when calling phantom.vault_info().
2019-12-19 PPS-19726 Performance improvement when retrieving Indicators.
2019-11-04 PPS-17570 Deleting a label no longer causes an error when editing existing roles which had the label assigned.
2019-12-11 PPS-15771 Editing an asset no longer automatically removes the optional password.
2020-01-20 PPS-21201 Drag & drop in the Visual Playbook Editor now works correctly in IE11.
Last modified on 27 February, 2020
Known issues in this release of Splunk Phantom   Get help for Splunk Phantom

This documentation applies to the following versions of Splunk® Phantom (Legacy): 4.8


Please expect delayed responses to documentation feedback while the team migrates content to a new system. We value your input and thank you for your patience as we work to provide you with an improved content experience!

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters