Container filter is not working in Splunk SOAR.
-and/or-
Fields in assets do not propagate properly.
Remove any custom fields that are generic in name, for example: Name, User, Owner, Label. These generic terms may be used by core SOAR fields and cause issues upon lookups. Make more customized naming conventions such as: Product-Owner, Department_User.
Developers are aware, but the issue has not been patched, so use best practices to avoid the issue for now.
| Revision | Publish Date | Comments |
|---|---|---|
1.0 |
29-Sep-2026
|
Initial Release |