Here is a list of the visible symptoms:
-Scheduled polling remains stuck for the original asset.
-The ingestion run never reaches a terminal state.
-Poll Now action becomes unresponsive for the affected asset and unrelated assets.
-Saving assets or updating apps hangs or times out.
-The UI or API may time out after approximately 30 seconds, but the underlying ingestd operation remains blocked.
-Existing scheduled polling for other assets may continue, making this look like a partial outage.
-Retrying Poll Now or saving the asset does not resolve the condition.
-Restarting ingestd restores Poll Now and asset/app management.
The exact persistent incident requires all three conditions:
-The stack is running SOAR 8.6 with async ingestd.
-A locally executed scheduled connector either:
Remains IPC-silent longer than the installed 300-second read timeout; or
-Encounters an IPC/protocol failure while its process remains alive.
-An asset is saved or its app is updated after the worker becomes stuck.
When this issue applies, the third condition changes from a per-asset ingestion hang into a persistent, system-wide ingestion outage.
Restarting of Ingested daemon restored the system. A permanent fix will be in the SOAR next release 8.7.
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
01-Oct-2026
|
Initial Release |