Splunk® Supported Add-ons

Splunk Add-on for RSA SecurID CAS

Release history for the Splunk Add-on for RSA SecurID CAS

The latest version of the Splunk Add-on for RSA SecurID Cloud Authentication Service is version 1.2.2 See Release notes for the Splunk Add-on for RSA SecurID CAS for the release notes of this latest version.

Version 1.2.1

Version 1.2.1 of the Splunk Add-on for RSA SecureID Cloud Authentication Service was released on Mar 20, 2023. It is compatible with the following software, CIM versions, and platforms.

Splunk platform versions 8.0, 8.1, 8.2
CIM 4.18
Platforms CentOS
Vendor Products RSA SecurID Access Cloud Authentication Service

New features

Version 1.2.1 of the Splunk Add-on for RSA SecurID Cloud Authentication Service has the following features.

  • Fixed a security vulnerability found in the certifi library.

Fixed issues

Version 1.2.1 of the Splunk Add-on for RSA SecurID Cloud Authentication Service contains the following, if any, known issues.


Known issues

Version 1.2.1 of the Splunk Add-on for RSA SecurID Cloud Authentication Service contains the following, if any, known issues.


Since PyJWT package used by the Add-on has changed its dependency to cryptography package it has brought some limitation on the CPU architectures supported by default. Cryptography uses Rust binary modules as part of the package. These modules compiled are compiled during package installation according to the architecture of the destination platform. Add-on is packed with cryptography packages compiled for Linux x86_64 (tested with Ubuntu 20.04 and CentOS 8) and Windows AMD64 (tested with Windows Server 2016, 2019 and 2022). This allows the add-on to work properly in Splunk Cloud environments. However it does not cover all architectures supported by Splunk so it is expected that the Add-on will not work at some on-premise environments.

To make it work it is required to manually install cryptography package directly on the host with this Add-on installed and then copy the following files and folders from python <python home folder>/lib/python3.7/site-packages to add-on lib folder etc->apps->Splunk_TA_rsa_securid_cas->lib:

  • _cffi_backend.cpython-37m-x86_64-linux-gnu.so for Linux only
  • _cffi_backend.cp37-win_amd64.pyd for Windows only
  • cffi
  • cffi-1.15.1.dist-info
  • cryptography
  • cryptography-39.0.1.dist-info
  • pycparser
  • pycparser-2.21.dist-info

For Windows you also need python3.dll file. You can take python37.dll under Splunk home bin folder, make a copy and rename the copy to python3.dll. It is fine to keep python3.dll in Splunk bin folder or move package folder under Splunk home etc->apps->Splunk_TA_rsa_securid_cas ->lib->Windows->AMD64->cryptography->hazmat->bindings

Third-party software attributions

Version 1.2.1 of the Splunk Add-on for RSA SecurID Cloud Authentication Service incorporates the following third-party software or libraries.

Splunk Add-on for RSA Secure ID CAS third-party software credits

Version 1.2.0

Version 1.2.0 of the Splunk Add-on for RSA SecureID Cloud Authentication Service was released on June 24, 2021. It is compatible with the following software, CIM versions, and platforms.

Splunk platform versions 8.0, 8.1, 8.2
CIM 4.18
Platforms CentOS
Vendor Products RSA SecurID Access Cloud Authentication Service

New features

Version 1.2.0 of the Splunk Add-on for RSA SecurID Cloud Authentication Service has the following features.

  • Migrated to the latest UCC Framework 5.3.3.
  • Fixed restart required issue.

Fixed issues

Version 1.2.0 of the Splunk Add-on for RSA SecurID Cloud Authentication Service contains the following, if any, known issues.


Known issues

Version 1.2.0 of the Splunk Add-on for RSA SecurID Cloud Authentication Service contains the following, if any, known issues.


Third-party software attributions

Version 1.2.0 of the Splunk Add-on for RSA SecurID Cloud Authentication Service incorporates the following third-party software or libraries.


Version 1.1.0

Version 1.1.0 of the Splunk Add-on for RSA SecureID Cloud Authentication Service was released on January 28, 2021. It is compatible with the following software, CIM versions, and platforms.

Splunk platform versions 8.0, 8.1
CIM 4.18
Platforms CentOS
Vendor Products RSA SecurID Access Cloud Authentication Service

New features

Version 1.1.0 of the Splunk Add-on for RSA SecurID Cloud Authentication Service has the following features.

  • Added Support for fetching and indexing high-risk user lists from the RSA SecurID Cloud Authentication Service. This provides users the ability to perform correlations and highlight risky user's activities in the environment.
  • Added support for Authentication event types and normalized the fields as per the Splunk Common Information Model.
  • Added support for the latest Splunk Common Information Model version 4.18.0.

Fixed issues

Version 1.1.0 of the Splunk Add-on for RSA SecurID Cloud Authentication Service contains the following, if any, known issues.


Known issues

Version 1.1.0 of the Splunk Add-on for RSA SecurID Cloud Authentication Service contains the following, if any, known issues.


Third-party software attributions

Version 1.1.0 of the Splunk Add-on for RSA SecurID Cloud Authentication Service incorporates the following third-party software or libraries.


Version 1.0.0

About this release

Version 1.0.0 of the Splunk Add-on for RSA SecureID CAS was released on September 2, 2020. It is compatible with the following software, CIM versions, and platforms.

Splunk platform versions 8.0
CIM 4.16
Platforms Linux
Vendor Products RSA SecurID Access Cloud Authentication Service

New features

Version 1.0.0 of the Splunk Add-on for RSA SecurID CAS has the following features.

Fixed issues

Version 1.0.0 of the Splunk Add-on for RSA SecurID CAS contains no known issues.


Known issues

Version 1.0.0 of the Splunk Add-on for RSA SecurID CAS contains no known issues.

Third-party software attributions

Version 1.0.0 of the Splunk Add-on for RSA SecurID CAS incorporates the following third-party software or libraries.

Last modified on 12 July, 2024
Release notes for the Splunk Add-on for RSA SecurID CAS  

This documentation applies to the following versions of Splunk® Supported Add-ons: released

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters