Known issues

If you are new to Splunk App for SOAR, read the Learn about Splunk App for SOAR topic in the Install and Configure Splunk App for SOAR manual before the release notes.

Release 1.0.41

The following known issues have been identified in this release. If no issues are listed, there are no known issues.

Date filed	Issue number	Description
April 11, 2023	PAPP-30092	Not all available indexes listed for audit input configurations Workaround Create a temporary index called "aaa_soar_temp_index". In Splunk App for SOAR, navigate to the Configuration tab. Click the Manage button for the server you want to add an audit input configuration to, and click Add Audit input. Set the Index as "aaa_soar_temp_index", complete the other required fields, then click Save. Immediately disable the Audit input. Go to go to Settings → Data Inputs → audit Click on your Audit input, click More settings, and select your desired index. Notes: Do not create new Audit inputs directly in Settings → Data Inputs → audit The dummy/temp index "aaa_soar_temp_index" is essentially supposed to be an index that will show up early in the index list in the SAS app (aaa for alphabetical ordering).