Workaround for PSAAS-23968: Required Join settings ignored due to switch from functionName to id in notRequiredJoins list For most users, no action is required. To determine if you must take action to update your playbooks, continue reading in this section.

For Splunk SOAR (On-premises) version 6.4.1.361. Check that your stack has been updated to this exact build number before proceeding.

An emergency update was emailed to you on May 30, 2025. If you already updated your affected playbooks by following the instructions in that email, no further action is required.

If you have playbooks that meet both of the following criteria, you must take further action:

• Created in a version earlier than version 6.4.1 AND
• Configured or updated join settings and saved after upgrading to version 6.4.1

For additional details on join settings, see Advanced settings in the Add a new block to your Splunk SOAR (On-premises) playbook document.

To update playbooks that meet the criteria just described, follow these steps.

1. Open a playbook that meets the criteria.
2. In the Visual Playbook Editor, review playbook blocks for which you configured or updated join settings. Ensure that the join settings are configured appropriately.
3. Save the playbook.
4. Repeat these steps for each affected playbook.

Splunk SOAR version 6.4.1 includes fixes for the following issues.