Splunk® Supported Add-ons

Splunk Add-on for Unix and Linux

Release notes for the Splunk Add-on for Unix and Linux

Version 9.1.0 of the Splunk Add-on for Unix and Linux was released on May 30, 2024.

Compatibility

Version 9.1.0 of the Splunk Add-on for Unix and Linux is compatible with the following software, CIM versions, and platforms:

Splunk platform versions 9.0.x, 9.1.x, 9.2.x
CIM 4.20.2
Supported OS for data collection All supported Unix operating systems. See Unix operating systems.
Vendor products All supported Unix operating systems. See Unix operating systems.

See the Scripted input reference for the Splunk Add-on for Unix and Linux page in the Reference chapter of this manual to learn more about scripted inputs and their operating system compatibility.

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

Version 9.1.0 of the Splunk Add-on for Unix and Linux has the following new features:

  • Updated the lsof script for compatibility with the latest version.

Bug fixes

  • Fixed wrong time stamp extraction for auditd sourcetype

Fixed issues

Version 9.1.0 of the Splunk Add-on for Unix and Linux has the following known issues. If no issues appear here, no issues have yet been reported:

Known issues

Version 9.1.0 of the Splunk Add-on for Unix and Linux has the following known issues. If no issues appear here, no issues have yet been reported:



Date filed Issue number Description
2024-03-19 ADDON-69658 cpu.sh shows momentary spikes of higher utilization when invoked compared to previous major version
2022-06-24 ADDON-53138 [PUBLIC] [Nix] cpu, cpu_metric scripts report higher CPU usage on Splunk 9.x




Third-party software attributions

The Splunk Add-on for Unix and Linux does not use third-party software or libraries.

Last modified on 07 June, 2024
Source types for the Splunk Add-on for Unix and Linux   Release history for the Splunk Add-on for Unix and Linux

This documentation applies to the following versions of Splunk® Supported Add-ons: released, released


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters