Splunk incident

<SOAR Playbooks can't be saved> | <CINC-61144> (Major Outage)

Critical Resolved View vendor source →

Splunk experienced a critical incident on June 5, 2025 affecting Infrastructure, lasting 1d 6h. The incident has been resolved; the full update timeline is below.

Started
Jun 05, 2025, 07:14 PM UTC
Resolved
Jun 07, 2025, 01:22 AM UTC
Duration
1d 6h
Detected by Pingoru
Jun 05, 2025, 07:14 PM UTC

Affected components

Infrastructure

Update timeline

  1. identified Jun 05, 2025, 07:14 PM UTC

    Splunk is aware of an issue currently affecting SOAR customers. As a result of the issue, users will not be able to save playbooks after making edits. Error message: "Unexpected keyword argument 'code_names' in function call" We understand the impact this has on your operations and are working to resolve the issue as quickly as possible. We will provide more information when it becomes available. No actions are needed from customers at this time. Thank you for your patience and understanding.

  2. monitoring Jun 06, 2025, 09:21 PM UTC

    We have implemented a fix for this issue. During this time we are monitoring the results to confirm the resolution and will continue to provide any additional updates once available.

  3. resolved Jun 07, 2025, 01:22 AM UTC

    This issue has been resolved. Teams will now begin their root cause analysis. If you believe that you are still impacted by this issue please contact customer support and reference .