Thinkst Canary Add-on for Splunk
Admins: Please read about Splunk Enterprise 8.0 and the Python 2.7 end-of-life changes and impact on apps and upgradeshere.
Overview
The Thinkst Canary Technology Add-On for Splunk allows Thinkst Canary users to move their incident and device data into Splunk. Support is provided via the regular Canary support channels.
For dashboards with Canary data, please install the Thinkst Canary App for Splunk available at https://splunkbase.splunk.com/app/3981/
For dashboards with Canary data, please install the Thinkst Canary App for Splunk available at https://splunkbase.splunk.com/app/3981/
Release Notes
Version 1.1.17
Nov. 6, 2020
Please don't upgrade to this version if you already have the TA installed. If you do, the TA will stop pulling Canary data into your Splunk due to a change in how the API key is stored.
We're working on a fix.
If you have upgraded and your Canary incidents no longer appear in Splunk, you'll need to first remove the TA, then install it fresh.
Version 1.1.16
Oct. 29, 2020
Changes to ensure secrets are encrypted correctly.
Version 1.1.14
Sept. 4, 2020
Bug fix for the "close incident" capabilities.
Version 1.1.13
Sept. 2, 2020
Version 1.1.11
Sept. 26, 2019
Rebuild broken package
Version 1.1.8
July 18, 2019
Improve proxy password handling.
Version 1.1.7
Sept. 5, 2018
Remove duplicate values in the KV view of the incident search.
Version 1.1.6
July 12, 2018
Changes for Splunkbase certification.