Splunk® Supported Add-ons

Splunk Add-on for NGINX

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Release history for the Splunk Add-on for NGINX

The latest version of the Splunk Add-on for NGINX is version 3.2.1. Please see Release notes for the Splunk Add-on for NGINX for release notes of this latest version.

Version 3.2.1

Version 3.2.1 of the Splunk Add-on for NGINX was released on February 22, 2023.

Splunk platform versions 8.1.x, 8.2.x, 9.0.0
CIM 5.0.1
Platforms Platform independent
Vendor Products NGINX Plus versions R16 v1.15.2, R17 v1.15.7, R18 v1.15.10, R19 v1.17.3, R20 v1.17.6, R21 v1.17.9, R22 v1.19.0, R24 v1.19.10, R25 v1.21.3, R27 v1.21.6

NGINX App Protect v1.3.0, v2.0, v3.5, v3.6, v3.11

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

Version 3.2.1 of the Splunk Add-on for NGINX has the following new features:

  • Upgraded the certifi library to version 2022.12.7
  • Fixed a security vulnerability found in the certifi library

Fixed issues

Version 3.2.1 of the Splunk Add-on for NGINX contains the following fixed issues. If no issues appear below, then none have been reported.


Known issues

Version 3.2.1 of the Splunk Add-on for NGINX contains the following known issues. If no issues appear below, then none have been reported.


Third-party software attributions

Version 3.2.1 of the Splunk Add-on for NGINX incorporates the following third-party software or libraries:

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects. A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for NGINX third-party software credits.

Version 3.2.0

Version 3.2.0 of the Splunk Add-on for NGINX was released on July 21, 2022.

Splunk platform versions 8.1.x, 8.2.x, 9.0.0
CIM 5.0.1
Platforms Platform independent
Vendor Products NGINX Plus versions R16 v1.15.2, R17 v1.15.7, R18 v1.15.10, R19 v1.17.3, R20 v1.17.6, R21 v1.17.9, R22 v1.19.0, R24 v1.19.10, R25 v1.21.3, R27 v1.21.6

NGINX App Protect v1.3.0, v2.0, v3.5, v3.6, v3.11

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

  • Support for Nginx Plus R27 v1.21.6.
  • Support for Nginx App Protect v3.11.
  • Support for CIM v5.0.1.
  • Minor bug fixes.

Fixed issues

Version 3.2.0 of the Splunk Add-on for NGINX contains the following fixed issues. If no issues appear below, then none have been reported.

Known issues

Version 3.2.0 of the Splunk Add-on for NGINX contains the following known issues. If no issues appear below, then none have been reported.

Third-party software attributions

Version 3.2.0 of the Splunk Add-on for NGINX incorporates the following third-party software or libraries:

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects. A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for NGINX third-party software credits.


Version 3.1.0

Version 3.1.0 of the Splunk Add-on for NGINX was released on November 10, 2021.

Splunk platform versions 8.0.x, 8.1.x, 8.2.x
CIM 4.20.2
Platforms Platform independent
Vendor Products NGINX Plus versions R16 v1.15.2, R17 v1.15.7, R18 v1.15.10, R19 v1.17.3, R20 v1.17.6, R21 v1.17.9, R22 v1.19.0, R24 v1.19.10, R25 v1.21.3

NGINX App Protect v1.3.0, v2.0, v3.5, v3.6

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

  • Support for Nginx Plus R24 v1.19.10 and R25 v1.21.3
  • Support for Nginx App Protect v3.5 and v3.6
  • Removed Python2 support. From this release onwards, add-on only supports python3.
  • Removed support for Splunk 7.x versions. Add-on now supports Splunk 8.x versions only.
  • CIM mapping and enhancements:
    • Added http_referrer_domain, url_length, and url_domain fields to the nginx:plus:access sourcetype.
    • Added http_referrer_domain, url_length, and url_domain fields to the nginx:plus:kv sourcetype.
    • Added support for CIM v4.20.2

Fixed issues

Version 3.1.0 of the Splunk Add-on for NGINX contains the following fixed issues. If no issues appear below, then none have been reported.

Known issues

Version 3.1.0 of the Splunk Add-on for NGINX contains the following known issues. If no issues appear below, then none have been reported.


Third-party software attributions

Version 3.1.0 of the Splunk Add-on for NGINX incorporates the following third-party software or libraries:

Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects. A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for NGINX third-party software credits.


Version 3.0.0

Version 3.0.0 of the Splunk Add-on for NGINX was released on October 16, 2020.

Compatibility

Version 3.0.0 of the Splunk Add-on for NGINX is compatible with the following software, CIM versions and platforms.

Splunk platform versions 8.0, 7.3, 7.2
CIM 4.17
Platforms Platform independent
Vendor Products NGINX Plus versions R16 v1.15.2, R17 v1.15.7, R18 v1.15.10, R19 v1.17.3, R20 v1.17.6, R21 v1.17.9, R22 v1.19.0

NGINX App Protect v1.3.0, v2.0

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New or changed features

  • Support for Nginx App Protect
  • Support for additional NGINX Plus versions
  • Support for CIM 4.17.0

Fixed issues

Version 3.0.0 of the Splunk Add-on for NGINX contains the following fixed issues. If no issues appear below, then none have been reported.


Known issues

Version 3.0.0 of the Splunk Add-on for NGINX contains the following known issues. If no issues appear below, then none have been reported.


Third-party software attributions

Version 3.0.0 of the Splunk Add-on for NGINX incorporates the following third-party software or libraries:

Version 2.0.2

Version 2.0.2 of the Splunk Add-on for NGINX was released on March 13, 2020.

Compatibility

Version 2.0.2 of the Splunk Add-on for NGINX is compatible with the following software, CIM versions and platforms.

Splunk platform versions 8.0.0, 7.3.0, 7.2.x, 7.1.x, 7.0.x
CIM 4.14
Platforms Platform independent
Vendor Products NGINX Plus R8(1.9.9), NGINX Plus R15(1.13.10)

New or changed features

  • Updated .conf to execute python3 files.

Fixed issues

Version 2.0.2 of the Splunk Add-on for NGINX contains the following fixed issues. If no issues appear below, then none have been reported.

Known issues

Version 2.0.2 of the Splunk Add-on for NGINX contains the following known issues. If no issues appear below, then none have been reported.

Third-party software attributions

Version 2.0.2 of the Splunk Add-on for NGINX incorporates the following third-party software or libraries:

Version 2.0.1

Version 2.0.1 of the Splunk Add-on for NGINX is compatible with the following software, CIM versions, and platforms.

Splunk platform versions 7.0.x, 7.1.x, 7.2.x, 7.3.x, 8.0.x
CIM 4.14
Platforms Platform independent
Vendor Products NGINX Plus R8 versions 1.9.9

NGINX Plus R15 versions 1.13.10 (New NGINX Plus API not supported)

New or changed features

  • Support for NGINX server v1.13.10 (New NGINX Plus API not supported)
  • Common information model (CIM) version 4.1.4 compatibility
  • Support for Python3
  • Support for HTTPS as the default for status API inputs.
  • Support for authentication of status endpoints that are configured on an NGINX server.

Fixed issues

Version 2.0.1 of the Splunk Add-on for NGINX contains the following fixed issues. If no issues appear below, then none have been reported.


Known issues

Version 2.0.1 of the Splunk Add-on for NGINX contains the following known issues. If no issues appear below, then none have been reported.


Third-party software attributions

Version 2.0.1 of the Splunk Add-on for NGINX incorporates the following third-party software or libraries:


Version 1.0.0

Version 1.0.0 of the Splunk Add-on for NGINX is compatible with the following software, CIM versions, and platforms.

Splunk platform versions 6.6.x, 7.0.x, 7.1.x, 7.2.x
CIM 4.11
Platforms Platform independent
Vendor Products NGINX Plus 1.9.9 and later

Known issues

Version 1.0.0 of the Splunk Add-on for NGINX does not contain any known issues.

Third-party software attributions

Version 1.0.0 of the Splunk Add-on for NGINX does not incorporate any third-party software or libraries.

Last modified on 19 December, 2023
PREVIOUS
Release notes for the Splunk Add-on for NGINX 		 

This documentation applies to the following versions of Splunk® Supported Add-ons: released

Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters