Splunk® SOAR (On-premises)

Release Notes

Acrobat logo Download manual as PDF


The classic playbook editor will be deprecated soon. Convert your classic playbooks to modern mode.
After the future removal of the classic playbook editor, your existing classic playbooks will continue to run, However, you will no longer be able to visualize or modify existing classic playbooks.
For details, see:
This documentation does not apply to the most recent version of Splunk® SOAR (On-premises). For documentation on the most recent version, go to the latest release.
Acrobat logo Download topic as PDF

Welcome to 5.3.3

If you are new to , read About in the Use manual to learn how you can use for security automation.

Python 2 support is deprecated

Python 2 was officially sunset by the Python Software Foundation on January 1, 2020.

The next release of will not include support for Python 2. Users are encouraged to update any playbooks, custom functions, or other tools written in Python 2 to Python 3 as quickly as possible to avoid possible interruptions.

See Convert playbooks or custom functions from Python 2 to Python 3 in Python Playbook API Reference for .

privileged installations are deprecated

Splunk SOAR (On-premises) will remove support for privileged installations, for both new deployments or upgrades of existing deployments in a near-future release.

The 5.3.3 release includes tools for migrating your existing deployment from a privileged deployment to an unprivileged one. These tools can be used any time after upgrading to release 5.3.3. If you need assistance to plan for migrating your deployment, contact your account team.

See Convert a privileged deployment to an unprivileged deployment in Install and Upgrade Splunk SOAR (On-premises).

What's new in 5.3.3

This release of includes the following enhancements.

Feature Description
View playbook run statistics You can now view statistics about playbook runs in the modern Visual Playbook Editor. See View Playbook Run Statistics in Administer .

You can also access the playbook run statistics through the API. See Playbook Resource Usage in REST API Reference for Splunk SOAR.

Convert Splunk SOAR (On-premises) deployments from privileged to unprivileged version 5.3.3 includes a new tool converting a deployment from a privileged to an unprivileged one. Prior to the 5.3.3 release, you could only convert deployments when upgrading from Splunk Phantom 4.10.7 to 5.0.1 .

See Convert a privileged deployment to an unprivileged deployment in Install and Upgrade Splunk SOAR (On-premises).

Improved installation and upgrade script 5.3.3 has improved the installation and upgrade script.

See these topics in Install and Upgrade Splunk SOAR (On-premises):

Last modified on 10 January, 2024
  NEXT
Known issues for

This documentation applies to the following versions of Splunk® SOAR (On-premises): 5.3.3

Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters