Known issues for

Release 6.3.1

Splunk SOAR version 6.3.1 includes the following known issues.

Date filed	Issue number	Description
2024-12-03	PSAAS-20901	supervisord failing to start on warm standby instance
2024-11-18	PSAAS-20667	Creating a new CEF field in datapath menu doesn't appear editable
2024-11-13	PSAAS-20654	Shutting down/restarting the system in a SOAR cluster without first shutting down SOAR can cause ingestion intervals to be delayed Workaround: Clear stale Ingestion status records from the database by running the following sql: {noformat}UPDATE ingestion_status SET status='failed', task_state='finished' WHERE status='running' AND start_time < now() - Interval '24 hours';{noformat} The above will only mark records that are older than 24 hours as failed. Alternatively, disable polling on old assets and create new ones.
2024-11-06	PSAAS-20437	VPE: 'Key' field not editable Workaround: Copy the information you want to add and paste it into the key field. Right-click or control-click your mouse and select the Paste option from the context menu. Keyboard shortcuts do not work to paste information into this field.
2024-10-28	PSAAS-20299	VPE: Slider bar in Debugger tab is too tiny to control
2024-10-21	PSAAS-20147	Data Preview doesn't prevent the user from spamming "Save and run" button, which can overload SOAR
2024-10-18	PSAAS-20124	Currently selected block in VPE may not be highlighted correctly
2024-09-27	PSAAS-19843	Playbook-type blocks: cannot filter on known data types, some input datapaths cannot be copied Workaround: Do not use the known data types filter. To copy a datapath, use the datapath picker in the configuration panel on the left of the screen.
2024-03-25	PSAAS-16959	Enabling the Secret Flag in Global Environment Variables Causes AB Test Connectivity/Poll Now to Fail Workaround: Remove the secret flag from all global environment variables for Test Connectivity to work with AB.
2024-02-22	PSAAS-16477	Podman does not currently work with redirected image URLs due to Docker Hub authentication token changes Workaround: Manually change the image: line in docker-compose.yaml to point to docker.io/phantomsaas/automation_broker:<$SOAR_VERSION>.