For details, see:
Fixed issues for
Release 6.0.2 includes the following fixed issues, in addition to issues fixed in Release 6.0.1 and Release 6.0.0, described below.
Release 6.0.2
Date resolved | Issue number | Description |
---|---|---|
2023-06-14 | PSAAS-13519, PSAAS-13538 | Auth tokens expire after 30 days; tokens should not expire The ph-auth-token for any automation user account will expire 30 days after it is generated. In releases prior to 6.0.0, these tokens did not expire. You might see a 401 Invalid Token error when using these tokens to call the Splunk SOAR API or running actions using an app with an asset configurations that uses these tokens. |
2023-06-8 | PSAAS-13503 | When a user without system_settings view permission switches tabs from the SOAR homepage, the SOAR UI and apps become unresponsive. |
Release 6.0.1
Date resolved | Issue number | Description |
---|---|---|
2023-05-18 | PSAAS-10127 | Playbooks using Threat Grid or urlscan.io app hang on the detonation action |
2023-05-10 | PSAAS-13273 | Daemon DecideD frequently crashed and restarted |
2023-04-18 | PSAAS-13091 | SOAR upgrade from 5.2.1 to 5.3.x will fail if a python3 app has been uninstalled |
2023-04-13 | PSAAS-13062 | Reverts PSAAS-11066 in 6.0.0 - User with the "view" permission in one tenant is able to edit assets in other tenants |
2023-04-10 | PSAAS-12370 | VPE: Downstream datapath variable values are replaced with variable name in various block types after upgrade |
2023-04-07 | PSAAS-11587 | A successful completion of called playbook in Synchronous mode, over-writes failure result in calling playbook |
2023-04-07 | PSAAS-12333 | Playbooks that open with smart block context warnings will disable the debugger and display 'Discard Changes' button |
2023-04-05 | PSAAS-11960 | VPE: "Refresh Event Data" in Utility block removes some of the original container information |
2023-04-05 | PSAAS-12592 | VPE: Screen goes blank when loading playbook in v6.0 worked in v5.5 |
2023-04-04 | PSAAS-12839 | GitRepos Installer step can fail on upgrades if the community repo has been disabled and duplicate playbooks exist in the db. |
2023-04-03 | PSAAS-12766 | Cannot Subscribe to more than one scheduled report in UI |
2023-04-03 | PSAAS-12427, PSAAS-12635 | Python2 deprecation notice task in the installer fails if there are pipe characters in the repo/playbook/cf names. |
2023-03-30 | PSAAS-11509 | Third-party license information is included in documentation, but not in the product UI |
2023-03-30 | PSAAS-12147 | System health charts truncate values |
2023-03-29 | PSAAS-12842 | When using an internal IdP for SAML2 auth, an error from incorrectly parsed XML prevents users from logging in |
2023-03-28 | PSAAS-12767 | App install with Chrome browser: Browser crashes when installing a TAR or TGZ file |
2023-03-28 | PSAAS-12369 | Logrotate fails because of syntax error in the config file |
2023-03-28 | PSAAS-12851, PSAAS-12434 | Port forward created by Priv to unpriv migration does not work on the loopback interface |
2023-03-27 | PSAAS-12311, PSAAS-12328 | Prompt block icon disappear after creating more than one empty questions |
2023-03-27 | PSAAS-12307 | VPE: Playbook Block: After multi-selecting inputs, deleting all selections and adding new selection has a comma prepended to datapath |
2023-03-27 | PSAAS-12319 | update_certificates status command should not fail on clusters that are not using glusterfs for shared filesystem |
2023-03-27 | PSAAS-12328, PSAAS-12311 | VPE: End block icon disappear after creating more than one empty questions |
2023-03-22 | PSAAS-11797 | App actions fail due to unescaped null characters (PSAAS-10127) |
2023-03-21 | PSAAS-12284 | Playbook input variables are marked as invalid within an input playbook |
2023-03-21 | PSAAS-12637 | Documentation: Cannot render specific div's from README.md properly on documentation page |
2023-03-21 | PSAAS-12470 | custom app install fails with "Multiple app directories detected." after upgrading from 5.5.0 to 6.0.0 |
2023-03-20 | PSAAS-11581 | PlaybookRunEx::UpdateStatus fails to update when playbook run is very old. |
2023-03-16 | PSAAS-12174 | recreate_local_db.pyc fails with "FileNotFoundError: No such file or directory: '/opt/phantom/dependencies/systemconfigs/opt/phantom/data/db/pg_hba.conf'" |
2023-03-07 | PSAAS-11908, PSAAS-11910 | Script "port_forward configure" flag "--no-prompt" doesn't work |
2023-03-06 | PSAAS-12378 | 6.0.0. upgrade script bypasses creating soar_local_admin step even if existing soar_local_admin users have bee deleted |
2023-02-27 | PSAAS-11472 | test_connectivity action fails with an asset using hashicorp vault credential manager on app editor |
2023-02-27 | PSAAS-12266 | Apps: Non compliant FIPS staged app fails to install |
2023-02-21 | PSAAS-11001 | Wrong results in PB: "NOT IN" clause wrongly returns FALSE in SOAR when there is a null value in its condition |
2023-02-06 | PSAAS-12004 | Playbook processing stops when Python runners time out and not get restarted |
2023-01-30 | PSAAS-11995 | phenv command does not produce expected results when telemetry is turned off |
2023-01-30 | PSAAS-11802 | Artifact save invokes indicator extraction when indicator feature is disabled. |
2023-01-25 | PSAAS-10582 | UI crash: opening container with a HUD CARD using a Custom Field and a list value leads to a blank page. |
2022-12-21 | PSAAS-11389 | Git app: Action git commit fails |
2022-11-29 | PSAAS-10817 | Bulk edit of Python 2 playbook properties is not blocked |
Release 6.0.0
Date resolved | Issue number | Description |
---|---|---|
2023-03-27 | PSAAS-12057 | Automation Broker (AB) configuration is ignored in the app editor |
2023-02-21 | PSAAS-11648 | Analyst Queue: When applying filters for owner for cases and events, the metrics at the top of the case screen do not change (containers are filtered) |
2023-02-15 | PSAAS-12280 | VPE: Playbook block inputs: text is deleted/added while user types |
2023-02-09 | PSAAS-11841 | Upgrading a SOAR instance to 5.5 does not change the community repo branch to 5.5 |
2023-02-08 | PSAAS-11979 | VPE: clicking on a block does not bring up the sidebar for editing conditions |
2023-02-03 | PSAAS-11650, PSAAS-12122 | VPE : Existing input playbook blocks are not configurable to change the input source |
2023-02-01 | PSAAS-11514 | VPE smart block context not taking into account custom datapaths |
2023-01-31 | PSAAS-11458 | Cleaning up containers via Data Retention causing excessive disk space usage |
2023-01-31 | PSAAS-11997 | Questions regarding python pandas/tabulate library in SOAR 5.5 - Pandas requires version '0.8.3' or newer of 'tabulate' (version '0.8.1' currently installed) |
2023-01-30 | PSAAS-9891 | Indicators are visible with labels that roles do not allow |
2023-01-30 | PSAAS-11874 | Reindexing 'asset' index does not work on Elastic Search |
2023-01-27 | PSAAS-5408 | /rest/widget_data/top_playbooks_actions endpoint returns invalid playbook_name field with tags |
2023-01-27 | PSAAS-11242 | VPE: After correct reconfiguration, "invalid resource" warning persists within subplaybook block |
2023-01-20 | PSAAS-11004, PSAAS-11658 | VPE: Values entered into custom function/Utility input arguments are deleted or modified |
2023-01-17 | PSAAS-11068 | Port forward from NRI port to 443 doesn't work on local machine. |
2023-01-13 | PSAAS-11799 | Forwarding data to Elastic Search does not work |
2023-01-13 | PSAAS-9054 | VPE : Playbooks fail to save: No name 'rules' in module 'phantom' |
2023-01-10 | PSAAS-11328 | VPE Empty Variables with inconsistent use of quotes |
2023-01-10 | PSAAS-11423 | Custom Function Editor: Not saving data type change |
2023-01-10 | PSAAS-11694 | VPE/prompt: "Could not find 'undefined' in users or roles" during playbook runs after upgrading from 5.4.0 and editing/saving the playbook |
2023-01-09 | PSAAS-11057 | Ingestd Daemon can hang during poll now in rare scenarios. |
2023-01-04 | PSAAS-11401 | Automation Broker generates a high volume of extraneous audit log records. |
2022-12-13 | PSAAS-10503 | Decided cancels running playbooks on ALL nodes after restarting |
2022-12-09 | PSAAS-10997 | Playbook decision block convert boolean strings to boolean values |
2022-12-06 | PSAAS-10703 | Default workbook is reset on upgrade if the original default has been removed |
2022-11-29 | PSAAS-11181 | Fix page crash on load for blocks using external resources |
Known issues for | Compatibility with related Splunk products |
This documentation applies to the following versions of Splunk® SOAR (On-premises): 6.0.2
Feedback submitted, thanks!