Release notes for the Splunk Add-on for Google Cloud Platform

Version 4.1.0 of the Splunk Add-on for Google Cloud Platform was released on January 16th 2023.

About this release

Version 4.1.0 of the Splunk Add-on for Google Cloud Platform is compatible with the following software, CIM versions, and platforms:

Splunk platform versions	8.1.x, 8.2.x, 9.0.x
CIM	5.0.2
Platforms	Platform independent
Vendor Products	Google Cloud Pub/Sub Google Cloud CloudMonitor service Google Cloud BigQuery Billing Google Cloud Storage Resource Metadata (Compute Engine, Cloud Storage, Kubernetes, VPC Access)

New features

Version 4.1.0 of the Splunk Add-on for Google Cloud Platform contains the following new features.

• Added support for three new types of Resource Metadata input data collection:
  • Cloud Storage data
  • Kubernetes data
  • VPC access data
• Renamed Resource metadata input to Resource Metadata (Compute Engine).
• Added support to collect Firewall related metadata in the existing Compute Engine input.
• Enhanced UI experience.
• Fixed proxy data collection issue.
• Fixed compatibility issue of Billing input in Windows and MacOS.
• Minor bug fixes.

Fixed issues

Version 4.1.0 of the Splunk Add-on for Google Cloud Platform fixes the following issues:

Date resolved	Issue number	Description
2022-10-19	ADDON-56014	The time stamp extraction is not happening from the event and "index time" is captured as "_time" which leading to older events indexed with current timestamp.
2022-09-08	ADDON-54996	GCP - socket.timeout: timed
2022-09-07	ADDON-55311	Data collection for Cloud Storage Bucket input with Proxy is not working when Splunk machine's internet turned off
2022-09-06	ADDON-54797	Unable to ingest data for the sourcetype
2022-09-06	ADDON-55365	Input configuration is not working with proxy
2022-09-06	ADDON-54994	Splunk Add-on for Google Cloud Platform not parsing data via Proxy
2022-09-06	ADDON-53069	GCP v3.2.0 - BigQuery Billing Input never loads lists for "BigQuery Dataset" field
2022-08-24	ADDON-54627	Splunk Add-On for Google CloudPlatform not showing all Projects

Known issues

Version 4.1.0 of the Splunk Add-on for Google Cloud Platform contains the following known issues. If no issues appear below, no issues have yet been reported:

Date filed	Issue number	Description
2023-04-20	ADDON-61920	Resource Metadata(Compute Engine) Large JSON events not getting ingested
2023-03-29	ADDON-61562	Constant retries for Resource Metadata(Compute Engine) input API calls in case of any API error
2023-03-10	ADDON-61335	Add _indexers workload in the app.manifest
2023-02-20	ADDON-60850	Data gets collected for only one zone, even if multiple zones are selected.

Third-party software attributions

Version 4.1.0 of the Splunk Add-on for Google Cloud Platform incorporates the following third-party software or libraries:

Third-party software attributions for the Splunk Add-on for Google Cloud Platform