As of version 6.4.0, the visual editor for classic playbooks is no longer part of Splunk SOAR. Before upgrading, convert your classic playbooks to modern mode. Your classic playbooks will continue to run and you can view and edit them in the SOAR Python code editor.
For details, see:
For details, see:
This documentation does not apply to the most recent version of Splunk® SOAR (On-premises).
For documentation on the most recent version, go to the latest release.
Fixed issues for
Release 6.2.1
Splunk SOAR version 6.2.1 includes fixes for the following issues.
| Date resolved | Issue number | Description |
|---|---|---|
| 2024-04-04 | PSAAS-12591 | VPE: Artifact labels in datapaths are not universally supported |
| 2024-04-03 | PSAAS-16703 | Playbook hangs when action license is exceeded |
| 2024-03-28 | PSAAS-8541 | Unreadable characters sporadically appear in UI |
| 2024-03-26 | PSAAS-16962, PSAAS-16431 | Automation Broker action fails to cancel correctly |
| 2024-03-26 | PSAAS-16963, PSAAS-16431 | Automation Broker fails to escape null characters |
| 2024-03-11 | PSAAS-16529 | When navigating back from investigation page to the analyst queue, stale filters are selected |
| 2024-03-11 | PSAAS-16210 | VPE: "Reconfigure Invalid Datapath" warnings on blocks after upgrade |
| 2024-03-06 | PSAAS-16355 | VPE: Renamed blocks do not reflect changed names in End block |
| 2024-03-04 | PSAAS-14130, PSAAS-14128 | Cluster node creation/upgrade may fail due to RabbitMQ CLI commands failing to connect to RabbitMQ server |
| 2024-02-29 | PSAAS-16368 | Copying playbook from remote repository to local repository fails |
| 2024-02-27 | PSAAS-13913 | VPE: After clicking Discard Changes button, blocks show error "Reconfigure Invalid Data Path" |
| 2024-02-22 | PSAAS-15916 | Under some conditions, Splunk SOAR's global search can quickly consume huge amounts of memory in uwsgi processes |
| 2024-02-22 | PSAAS-16357 | Playbook Converter: Datapaths not present in modern datapath picker for custom function and playbook blocks |
| 2024-02-22 | PSAAS-16117 | Upgraded instance throws error when creating local git repo |
| 2024-02-08 | PSAAS-16157 | Upgrade to 6.2.0 failed with error "Failed to move /opt/phantom/data/db to /opt/phantom/data/db.old" when DB is on its own disk partition |
| 2024-02-06 | PSAAS-15684 | Playbook API phantom.collect2() with tags filter is not returning beyond the first 2000 artifacts in a container |
| 2024-02-05 | PSAAS-15256 | Inactivity timeout logs the user out while working in the VPE |
| 2024-02-05 | PSAAS-16122 | Saving playbooks to a local repo fails with 'Push master failed: (branch is currently checked out)' |
| 2024-02-01 | PSAAS-16049 | Playbook converter: Asset name is incorrect in the converted playbook |
| 2024-01-31 | PSAAS-8919 | VPE: Line after filter block loses label when doubled then removed |
| 2024-01-31 | PSAAS-15694 | Indicators page shows empty table for non-admin users |
| 2024-01-31 | PSAAS-15828 | After upgrading to version of SOAR running Postgres 15, 'ibackup --setup' fails |
| 2024-01-31 | PSAAS-15610 | Widget visibility is not saved via "manage widgets" |
| 2024-01-31 | PSAAS-14693, PSAAS-16192 | VPE: MC block - Actions with optional query parameters not working |
| 2024-01-30 | PSAAS-15201 | Password Vault: "Assets with enabled password manager" table can lead to Apps page without an asset selected |
| 2024-01-30 | PSAAS-15709 | Playbook API: phantom.format throws error when a value is not found on the datapath |
| 2024-01-30 | PSAAS-16112 | Playbook Converter: Case sensitivity and variable differences are not handled properly |
| 2024-01-29 | PSAAS-15951 | spawn.log is not working after upgrading to SOAR version 6.1.1 |
| 2024-01-29 | PSAAS-16089 | Missing notification for inactivity timeout |
| 2024-01-29 | PSAAS-15392 | Playbook Converter: Synchronous playbook fails to run for converted playbooks |
| 2024-01-29 | PSAAS-16069 | SOAR doesn't seem to update to inactive when broker_shutdown is called |
| 2024-01-29 | PSAAS-15695 | JSON viewer for input playbooks - analyst view- has clickable URLs |
| 2024-01-17 | PSAAS-15957 | Investigation page: Activity tab doesn't show playbook name. Shows "..." |
| 2024-01-11 | PSAAS-15100 | PB Converter: Asset Mapper modal is not shown in the converted playbook |
| 2023-12-20 | PSAAS-15685 | Naming a forwarder group "splunk" breaks forwarding |
| 2023-12-19 | PSAAS-13496 | App Editor: Setting default app action booleans to 'false' does not work. |
| 2023-12-13 | PSAAS-8939 | VPE: Custom function failure logging is not in red font |
| 2023-12-13 | PSAAS-14550 | User unable to bulk edit/close the events due to missing unrelated required tag |
| 2023-12-13 | PSAAS-15199 | If the CyberArk instance is down and an action is run, the response message is not clear |
| 2023-12-12 | PSAAS-15528, PSAAS-13668 | Home Page: Open event widget has overlapping characters for SLA and Severity |
| 2023-12-12 | PSAAS-15338 | The Repo Permissions in the user modal does not show permissions |
| 2023-12-12 | PSAAS-9149 | Issues with environment variables when "Secret" is checked |
| 2023-12-12 | PSAAS-13362 | Playbook Run History: Need to add 'Pending' to Status column filter |
| 2023-12-11 | PSAAS-15543 | Test connectivity for asset might result in "failed to send" and HTTP 500 "internal server" error for POST to /rest/asset/{id} |
| 2023-12-04 | PSAAS-15086 | Cluster upgrade failing on DatabaseSchema with 'Failed to apply database migrations' |
| 2023-07-10 | PSAAS-13995 | An artifact CEF field not editable when created using REST API call if value is 0 |
Last modified on 01 May, 2024
| Known issues for | Compatibility with related Splunk products |
This documentation applies to the following versions of Splunk® SOAR (On-premises): 6.2.1
Download manual
Feedback submitted, thanks!