Installing pandas to use in Splunk SOAR

[hiepdao]

Hello team,

We want to run some custom code inside Splunk SOAR that utilize the pandas python package.

We can already install the pandas and use it using the below commands:

sudo su - phantom
 
/opt/phantom/bin/phenv pip install pandas

After installing we can use pandas in custom functions just fine.

I want to ask if this is good or can it lead to any compatibility issue in the future? (e.g. SOAR upgrades)

Thanks in advance!

[phanTom]

@hiepdao whilst on-prem it should be fine but you may need to check if the lib ever needs an update. 

The best practise, especially if you ever move to Cloud SOAR, would be to create an app for the actions requiring pandas and then package the pandas .whl file as a dependency to make it more portable.