Installation and configuration information can be found at the github page
Changes in the new version:
Updated the endpoint for Events to use the Activity endpoint. This way both Flagged IP Alerts and Agent Alerts will be imported.
1.0.21
Fixed an issue where the Splunk App was not correctly using the multi instance mode. The symptoms would be that everything appears to run correctly but would exit before writing out the events. There is a new field in the Inputs configuration for Interval that does need to be filled in if it is not already.
Fixed an issue where the Splunk App was not correctly using the multi instance mode. The symptoms would be that everything appears to run correctly but would exit before writing out the events. There is a new field in the Inputs configuration for Interval that does need to be filled in if it is not already.
1.0.17
- Fixed requirement for app.conf for Splunk Cloud Support, wasn't correctly fixed in 1.0.16.
1.0.15
1.0.14
New Features:
1.0.16
- Fixed requirement for app.conf for Splunk Cloud Support.
1.0.15
1.0.14
New Features:
1.0.15
1.0.14
New Features:
Bugs Fixed:
New Features:
This release includes improvements for:
1.0.12 Improvements:
As a Splunkbase app developer, you will have access to all Splunk development resources and receive a 10GB license to build an app that will help solve use cases for customers all over the world. Splunkbase has 1000+ apps from Splunk, our partners and our community. Find an app for most any data source and user need, or simply create your own with help from our developer portal.