Release notes for the Splunk Add-on for Squid Proxy

Version 2.1.0 of the Splunk Add-on for Squid Proxy was released on December 1, 2023 and is compatible with the following software, CIM versions, and platforms.

Splunk platform versions	9.0, 9.1
CIM	5.2.0
Platforms	Platform independent
Vendor Products	Squid Proxy 4.13, 6.5

New features

Version 2.1.0 of the Splunk Add-on for Squid Proxy has the following new features.

• Provided support for the latest version of Squid Proxy Server – 6.5
• Mapped "action" field for these vendor_action values:
  • NONE_NONE
  • TCP_MISS_ABORTED
  • NONE_NONE_ABORTED
  • TCP_MEM_HIT
• Replaced index-time extraction with search time for sourcetype squid:access:recommended
• Corrected the "bytes_out" field extraction in sourcetype squid:access
  • The value present in the event was actually "bytes_out" and not "bytes_in". Now, bytes_out will be extracted from the event

Fixed Issues

Version 2.1.0 of the Splunk Add-on for Squid Proxy resolves the following issues:

Known issues

Version 2.1.0 of the Splunk Add-on for Squid Proxy contains no known issues.

Third-party software attributions

Version 2.1.0 of the Splunk Add-on for Squid Proxy does not incorporate any third-party software or libraries.