Skip to content

Latest commit

 

History

History
37 lines (26 loc) · 1.31 KB

CHANGELOG.md

File metadata and controls

37 lines (26 loc) · 1.31 KB
Raw

Changelog

All notable changes to the DCSO Threat Intelligence Engine (TIE) Add-On for Splunk will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[3.0.0] - 2023-12-19

Added

  • Support for new TI-Engine

[2.0.0b1] - 2020-06-17

Added

  • Support for Splunk Enterprise v8, which means dropping support for Python v2.7. We will not support Python 2 any longer.
  • Possibility to specify ranges when configuring the add-on. For example, severity can be specified as 1- to include all but zero, or 2-4 to include only 2, 3, and 4, or -5 to include all 5 or lower. Specifying just a number will work as before.
  • Logging is now done in a separate file as JSON. This makes it easier to audit the AddOn in Splunk itself (using an index).
  • We include a setup.py which can be used to create a Splunk distribution using setup.py splunkdist. The resulting TAR or ZIP files can then be used to install through Splunk's web interface.
  • The configuration of the Add-On within Splunk's web interface has been a bit reorganized and more help has been added.

[1.0.0] - 2019-03-12

Added

  • Published Splunk technical add-on in version 1.0.0 at Github.com