Release history for the Splunk Add-on for Github

Latest version

The latest version of the Splunk Add-on for Github is version 2.2.1 See Release notes for the Splunk Add-on for Github for the release notes of this latest version.

Version 2.2.0

Version 2.2.0 of the Splunk Add-on for GitHub was released on July 5, 2023.

Compatibility

Version 2.2.0 of the Splunk Add-on for GitHub is compatible with the following software, CIM versions, and platforms.

Splunk platform versions	8.1.x, 8.2.x, 9.0.x
CIM	5.1.1
Platforms	Platform independent
Vendor Products	GitHub Enterprise v3.2, Github Enterprise Cloud

New Features

• Provided support of GitHub Cloud Audit events with category org, repo, and team in sourcetype github:cloud:audit.
• Provided support of GitHub Enterprise Cloud Audit log streaming in sourcetype github:cloud:audit of the add-on.
• Made "Account Type" field uneditable while editing a GitHub Cloud Audit Input to avoid data collection gaps.

Fixed issues

Version 2.2.0 of the Splunk Add-on for GitHub has the following fixed issues:

Known issues

Version 2.2.0 of the Splunk Add-on for GitHub has the following reported known issues. If no issues appear below, no issues have yet been reported:

Third-party libraries

The Splunk Add-on for GitHub version 2.2.0 uses the following third-party libraries:

Third-party libraries for Splunk Add-on for GitHub version 2.2.1

Version 2.1.1

Version 2.1.1 of the Splunk Add-on for GitHub was released on March 2, 2023.

Compatibility

Version 2.1.1 of the Splunk Add-on for GitHub is compatible with the following software, CIM versions, and platforms.

Splunk platform versions	8.1.x, 8.2.x, 9.0.x
CIM	5.0.1
Platforms	Platform independent
Vendor Products	GitHub Enterprise v3.2, Github Enterprise Cloud

New Features

There are no new features in this release.There are certain bug fixes mentioned in the below section.

Fixed issues

Version 2.1.1 of the Splunk Add-on for GitHub has the following fixed issues:

• Fixed validation issues for GitHub Cloud Audit Input.
• Upgraded the third-party certifi library to version 2022.12.7
• Fixed a security vulnerability found in the certifi library.

Known issues

Version 2.1.1 of the Splunk Add-on for GitHub has the following reported known issues. If no issues appear below, no issues have yet been reported:

Third-party libraries

The Splunk Add-on for GitHub version 2.1.1 uses the following third-party libraries:

Third-party libraries for Splunk Add-on for GitHub version 2.1.1

Version 2.1.0

Version 2.1.0 of the Splunk Add-on for GitHub was released on October 9, 2022.

Compatibility

Version 2.1.0 of the Splunk Add-on for GitHub is compatible with the following software, CIM versions, and platforms.

Splunk platform versions	8.1.x, 8.2.x, 9.0.x
CIM	5.0.1
Platforms	Platform independent
Vendor Products	GitHub Enterprise v3.2, Github Enterprise Cloud

New Features

There are no new feature in this release.

Fixed issues

Version 2.1.0 of the Splunk Add-on for GitHub has the following fixed issues:

• Fixed the checkpoint mechanism for both Audit and User inputs.
• Enhanced input configuration validations for a better user experience.
• Added a retry mechanism for user data collection in case of server errors.

Known issues

Version 2.1.0 of the Splunk Add-on for GitHub has the following reported known issues. If no issues appear below, no issues have yet been reported:

Third-party libraries

The Splunk Add-on for GitHub version 2.1.0 uses the following third-party libraries:

Third-party libraries for Splunk Add-on for GitHub version 2.1.0

Version 2.0.0

Version 2.0.0 of the Splunk Add-on for GitHub was released on May 27, 2022.

Compatibility

Version 2.0.0 of the Splunk Add-on for GitHub is compatible with the following software, CIM versions, and platforms.

Splunk platform versions	8.1.x, 8.2.x
CIM	5.0.1
Platforms	Platform independent
Vendor Products	GitHub Enterprise v3.2, Github Enterprise Cloud

New Features

• Integrated the support of data collection from the GitHub Enterprise Cloud.
• Added the add-on UI components for Configuration and Inputs.
• Added support to fetch audit logs for Organization and Enterprise account types.
• Added support to fetch user metadata events from GitHub Cloud via modular inputs.
• Added proxy and logging support in data collection.
• Added compatibility with the latest CIM version 5.1.0 for the newly collected events from GitHub Cloud.

Fixed issues

Version 2.0.0 of the Splunk Add-on for GitHub has the following fixed issues:

Known issues

Version 2.0.0 of the Splunk Add-on for GitHub has the following reported known issues. If no issues appear below, no issues have yet been reported:

Version 1.0.0

Version 1.0.0 of the Splunk Add-on for GitHub was released on December 27, 2021.

Compatibility

Version 1.0.0 of the Splunk Add-on for GitHub is compatible with the following software, CIM versions, and platforms.

Splunk platform versions	8.0.x, 8.1.x, 8.2.x
CIM	4.20.2
Platforms	Platform independent
Vendor Products	GitHub Enterprise v3.2

New Features

• Provides support for audit logs of GitHub Enterprise Server (GHES) for version v3.2.

• Collects GitHub Enterprise audited actions logs using GitHub's Log Forwarding feature on the specified Splunk server with Splunk connect for Syslog (SC4S).

• SC4S assigns github:enterprise:audit sourcetype to all events and the logs are collected in the gitops index.

• Added CIM mapping & extractions from scratch for the latest CIM compatible version 4.20.2.

Known issues

Version 1.0.0 of the Splunk Add-on for GitHub has the following reported known issues. If no issues appear below, no issues have yet been reported: