Splunk® SOAR (On-premises)

Release Notes

Acrobat logo Download manual as PDF


The classic playbook editor will be deprecated soon. Convert your classic playbooks to modern mode.
After the future removal of the classic playbook editor, your existing classic playbooks will continue to run, However, you will no longer be able to visualize or modify existing classic playbooks.
For details, see:
Acrobat logo Download topic as PDF

Fixed issues for

Release 6.2.1

Splunk SOAR version 6.2.1 includes fixes for the following issues.


Date resolved Issue number Description
2024-04-04 PSAAS-12591 VPE: Artifact labels in datapaths are not universally supported
2024-04-03 PSAAS-16703 Playbook hangs when action license is exceeded
2024-03-28 PSAAS-8541 Unreadable characters sporadically appear in UI
2024-03-26 PSAAS-16962, PSAAS-16431 Automation Broker action fails to cancel correctly
2024-03-26 PSAAS-16963, PSAAS-16431 Automation Broker fails to escape null characters
2024-03-11 PSAAS-16529 When navigating back from investigation page to the analyst queue, stale filters are selected
2024-03-11 PSAAS-16210 VPE: "Reconfigure Invalid Datapath" warnings on blocks after upgrade
2024-03-06 PSAAS-16355 VPE: Renamed blocks do not reflect changed names in End block
2024-03-04 PSAAS-14130, PSAAS-14128 Cluster node creation/upgrade may fail due to RabbitMQ CLI commands failing to connect to RabbitMQ server
2024-02-29 PSAAS-16431, PSAAS-16963, PSAAS-16962 Automation Broker: Actions intermittently hang for Automation Broker when there are connection issues
2024-02-29 PSAAS-16368 Copying playbook from remote repository to local repository fails
2024-02-27 PSAAS-13913 VPE: After clicking Discard Changes button, blocks show error "Reconfigure Invalid Data Path"
2024-02-22 PSAAS-15916 Under some conditions, Splunk SOAR's global search can quickly consume huge amounts of memory in uwsgi processes
2024-02-22 PSAAS-16357 Playbook Converter: Datapaths not present in modern datapath picker for custom function and playbook blocks
2024-02-22 PSAAS-16117 Upgraded instance throws error when creating local git repo
2024-02-08 PSAAS-16157 Upgrade to 6.2.0 failed with error "Failed to move /opt/phantom/data/db to /opt/phantom/data/db.old" when DB is on its own disk partition
2024-02-06 PSAAS-15684 Playbook API phantom.collect2() with tags filter is not returning beyond the first 2000 artifacts in a container
2024-02-05 PSAAS-15256 Inactivity timeout logs the user out while working in the VPE
2024-02-05 PSAAS-16122 Saving playbooks to a local repo fails with 'Push master failed: (branch is currently checked out)'
2024-02-01 PSAAS-16049 Playbook converter: Asset name is incorrect in the converted playbook
2024-01-31 PSAAS-8919 VPE: Line after filter block loses label when doubled then removed
2024-01-31 PSAAS-15694 Indicators page shows empty table for non-admin users
2024-01-31 PSAAS-15828 After upgrading to version of SOAR running Postgres 15, 'ibackup --setup' fails
2024-01-31 PSAAS-15610 Widget visibility is not saved via "manage widgets"
2024-01-31 PSAAS-14693, PSAAS-16192 VPE: MC block - Actions with optional query parameters not working
2024-01-30 PSAAS-15201 Password Vault: "Assets with enabled password manager" table can lead to Apps page without an asset selected
2024-01-30 PSAAS-15709 Playbook API: phantom.format throws error when a value is not found on the datapath
2024-01-30 PSAAS-16112 Playbook Converter: Case sensitivity and variable differences are not handled properly
2024-01-29 PSAAS-15951 spawn.log is not working after upgrading to SOAR version 6.1.1
2024-01-29 PSAAS-16089 Missing notification for inactivity timeout
2024-01-29 PSAAS-15392 Playbook Converter: Synchronous playbook fails to run for converted playbooks
2024-01-29 PSAAS-16069 SOAR doesn't seem to update to inactive when broker_shutdown is called
2024-01-29 PSAAS-15695 JSON viewer for input playbooks - analyst view- has clickable URLs
2024-01-17 PSAAS-15957 Investigation page: Activity tab doesn't show playbook name. Shows "..."
2024-01-11 PSAAS-15100 PB Converter: Asset Mapper modal is not shown in the converted playbook
2023-12-20 PSAAS-15685 Naming a forwarder group "splunk" breaks forwarding
2023-12-19 PSAAS-13496 App Editor: Setting default app action booleans to 'false' does not work.
2023-12-13 PSAAS-8939 VPE: Custom function failure logging is not in red font
2023-12-13 PSAAS-14550 User unable to bulk edit/close the events due to missing unrelated required tag
2023-12-13 PSAAS-15199 If the CyberArk instance is down and an action is run, the response message is not clear
2023-12-12 PSAAS-15528, PSAAS-13668 Home Page: Open event widget has overlapping characters for SLA and Severity
2023-12-12 PSAAS-15338 The Repo Permissions in the user modal does not show permissions
2023-12-12 PSAAS-9149 Issues with environment variables when "Secret" is checked
2023-12-12 PSAAS-13362 Playbook Run History: Need to add 'Pending' to Status column filter
2023-12-11 PSAAS-15543 Test connectivity for asset might result in "failed to send" and HTTP 500 "internal server" error for POST to /rest/asset/{id}
2023-12-04 PSAAS-15086 Cluster upgrade failing on DatabaseSchema with 'Failed to apply database migrations'
2023-07-10 PSAAS-13995 An artifact CEF field not editable when created using REST API call if value is 0
Last modified on 04 April, 2024
PREVIOUS
Known issues for
  NEXT
Compatibility with related Splunk products

This documentation applies to the following versions of Splunk® SOAR (On-premises): 6.2.1


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters