endoflife.ai EOL Risk

Most inventories can tell you what is installed. Few can tell you what the maker has stopped patching. This app adds that answer to the software and operating-system inventory you already collect in Splunk. The eollookup search command takes a product and a version from each row and adds: - whether the version is still supported, close to its end, or past end of life - the end-of-life date, with days remaining or days past - the EOL Risk Score (0 to 100) and its letter grade - whether the product has an entry in CISA's Known Exploited Vulnerabilities catalog - where the date comes from, as a link you can open Full patch versions work: 18.19.0 is answered for the Node.js 18 line, 8.6 for RHEL 8. When a build could belong to more than one support line (SQL Server service packs, Firefox standard and ESR) the app does not pick one. It says so and lists the candidates. Nothing is guessed. Included: - eollookup, a streaming search command that batches lookups, so a search over many hosts makes few API calls - an overview dashboard: past end of life, ending within 180 days, past end of life with a CISA KEV entry, and rows that could not be matched - four example reports, none scheduled - a setup page that stores your API key in Splunk's encrypted credential store Coverage is 700+ products: operating systems, databases, language runtimes, frameworks, network and security appliances. Every date names its source. What leaves your environment: product names and version strings, sent over HTTPS to api.endoflife.ai when the command runs. No host names, users, IP addresses or event data. The app works without an API key at the anonymous limits until November 16, 2026; from then the API needs a key for every lookup. A free key (150 requests a day, no expiry) is enough to evaluate it: https://endoflife.ai/api#free-key. Keys and their limits are published at https://endoflife.ai/api.