Known issues for Splunk SOAR (On-premises)

Release 7.0.0

Splunk SOAR (On-premises) known issues for release 7.0.0

Date filedIssue numberDescription
2025-09-15PSAAS-25490Investigation page: Run Playbook button in Workbook tab is not clickable

Workaround

Use the Chrome browser. This issue does not exist when using Chrome.

2025-09-15PSAAS-25484Adding else-if statement in existing playbook deletes previously configured else-if statement

Workaround

Before adding a new else-if condition to an existing decision or filter block, follow these steps

  1. Make a backup copy of the existing decision or filter block. (Select the original block. Press Cmd/Ctrl+C then Cmd/Ctrl+V to create a copy and paste it on the canvas.)

  2. Add the new condition to the original block. If any existing conditions are erased, delete both the new and erased conditions. Refer to the backup block to reconfigure the missing data.

  3. Delete the backup block.

2025-09-03PSAAS-25410Blank page in container view when Custom Field contains a list
2025-08-27PSAAS-25311VPE: Utility block - API config info appears deleted when selecting different utility block

Workaround

Data is not deleted, but is not displayed. To display the utility block data again, click anywhere on the VPE canvas. Then select the original utility block to confirm that data displays correctly.

2025-08-12PSAAS-24911ES blocks fail when the finding does not exist on Splunk SOAR

Workaround

When using a `get finding or investigation` API in an ES playbook block, add an upstream ES block with `refresh finding or investigation` API.

2025-08-08PSAAS-24846Events Display Preferences: non-admin users can toggle default lookback dropdown

Workaround

Only SOAR Administrators can update the default lookback value under Administration > Event Settings > Display Preferences. Users without admin permissions must contact an admin to update this setting.

2025-07-31PSAAS-24709Automation Dependencies: Unhelpful error messages display when uploading dependency files with invalid extensions or malformed content
2025-07-15PSAAS-24475pgbouncer logs are not written to the log file after logrotate
2025-07-14PSAAS-24467playbook/run query hangs indefinitely on large data returned
2025-07-07PSAAS-24401Script make_server_node.pyc has hardcoded user 'phantom' and fails with a different one