I'm having some issues with my on-prem deployment of Splunk SOAR 6.3.1and would like to revert to 6.2.2. Should I just follow the steps for upgrading even though I'm reverting to a previous version? https://docs.splunk.com/Documentation/SOARonprem/6.2.2/Install/UpgradeSOARInstance ... View more

This is the error I get when trying to start SOAR on the Warmstandby: Splunk SOAR is in standby. Starting all services except automation daemons Starting Database server (PostgreSQL): [ OK ] Starting Connection pooler (PgBouncer): [ OK ] Checking database connectivity: [ OK ] Checking component versions: [ OK ] Starting Supervisord: [ OK ] Starting Splunk SOAR daemons: [ OK ] Checking Supervisord processes: [FAILED] add_to_es_index failed to start. Check /opt/soar/var/log/phantom/add-es-index-stderr.log for more info. Splunk SOAR startup failed.   I saw there is a known issue for this: https://docs.splunk.com/Documentation/SOARonprem/6.3.1/ReleaseNotes/KnownIssues 2024-12-03 PSAAS-20901 supervisord failing to start on warm standby instance   Does anyone have a workaround or fix for this issue? ... View more

We got flagged for an OpenSSL1.0.2f vulnerability on our SOAR instance within the default installed Splunk Universal Forwarder path. It seems in later UF versions this vulnerability is remediated. I'm wondering what version of UF comes in the latest SOAR 6.2.2 version? ... View more