Release notes for the Splunk Add-on for CrowdStrike FDR

Version 1.5.0 of the Splunk Add-on for Crowdstrike FDR was released on November 27, 2023. It is compatible with the following software, CIM versions, and platforms.

Splunk platform versions	8.2.x, 9.0.x and 9.1.x
CIM	N/A
Platforms	Platform independent
Vendor Products	Crowdstrike FDR

New features

Version 1.5.0 of the Splunk Add-on for Crowdstrike FDR contains the following new and changed features:

• New modular input Device API Inventory Sync Service.
• New events CIM normalisation.
• New Device field filter.
• Index-time host resolution configuration for SQS based manager and for SQS based consumer.

Fixed Issues

Version 1.5.0 of the Splunk Add-on for CrowdStrike FDR contains the following, if any, issues.

Known issues

Version 1.5.0 of the Splunk Add-on for CrowdStrike FDR contains the following, if any, issues.

Third-party software attributions

Version 1.5.0 of the Splunk Add-on for CrowdStike FDR contains the following third-party libraries.

Media:PROJECT splunk-add-on-for-crowdstrike-fdr 2023-12-11 094400794Z.pdf