Release history for the Splunk Add-on for Tomcat
Latest release
The most recent versions of the Splunk Add-on for Tomcat is version 3.2.0. See Release notes for the Splunk Add-on for Tomcat for the release notes of this latest version.
Version 3.1.4
About this release
Version 3.1.4 of the Splunk Add-on for Tomcat was released on December 12, 2023.
Compatibility
Version 3.1.4 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 9.0.x, 9.1.x |
| CIM | 5.0.1 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23 |
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.
New features
- Fixed the security vulnerabilities found in the certifi, requests, and urllib3 libraries by upgrading its version from 2022.12.7 to 2023.11.17, 2.26.0 to 2.31.0, and 1.26.6 to 1.26.18.
Fixed issues
Version 3.1.4 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues
Version 3.1.4 of the Splunk Add-on for Tomcat has the following known issues.
Third-party software attributions
Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.
A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for Tomcat third-party software credits.
Version 3.1.3
Version 3.1.3 of the Splunk Add-on for Tomcat was released on February 22, 2023.
Compatibility
Version 3.1.3 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 8.1.x, 8.2.x, 9.0.x |
| CIM | 5.0.1 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23 |
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.
New features
- Upgraded the third-party certifi library to version 2022.12.7
- Fixed a security vulnerability found in the certifi library.
Fixed issues
Version 3.1.3 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues
Version 3.1.3 of the Splunk Add-on for Tomcat has the following known issues.
Third-party software attributions
Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.
A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for Tomcat third-party software credits.
Version 3.1.2
Version 3.1.2 of the Splunk Add-on for Tomcat was released on Nov 7, 2022.
Compatibility
Version 3.1.2 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 8.1.x, 8.2.x, 9.0.x |
| CIM | 5.0.1 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23 |
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.
New features
- Fixed a security vulnerability found in the commons-text library by upgrading its version from 1.9.0 to 1.10.0
Fixed issues
Version 3.1.2 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues
Version 3.1.2 of the Splunk Add-on for Tomcat has the following known issues.
Third-party software attributions
Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.
A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for Tomcat third-party software credits.
Version 3.1.1
Version 3.1.1 of the Splunk Add-on for Tomcat was released on Sept 20, 2022.
Compatibility
Version 3.1.1 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 8.1.x, 8.2.x, 9.0.x |
| CIM | 5.0.1 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23 |
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.
New features
- Support for Tomcat server version 10.0.23
- CIM compatibility with version 5.0.1
- Fixed multiple security vulnerabilities found in the fastjson, commons-configuration2 and log4j libraries:
- Upgraded the fastjsonlog4j library from version 1.2.78 to 1.2.83
- Upgraded the log4j library from version 2.16.0 to 2.18.0
- Upgraded the commons-configuration2 library from version 2.7 to 2.8.0
Fixed issues
Version 3.1.1 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues
Version 3.1.1 of the Splunk Add-on for Tomcat has the following known issues.
Third-party software attributions
Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.
A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for Tomcat third-party software credits.
Version 3.0.2
The log4j library used in the Splunk Add-on for Tomcat was updated to version 2.16 in December 2021. Since then log4j has released version 2.17.1 which addresses additional vulnerabilities. These vulnerabilities are rated as moderate severity and the add-on does not use the affected code path. However, this add-on will be updated to the recommended version of 2.17.1 in an upcoming release.
Version 3.0.2 of the Splunk Add-on for Tomcat was released on Dec 17, 2022.
Compatibility
Version 3.0.2 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 8/0x, 8.1.x, 8.2.x |
| CIM | 4.20 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12 |
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.
New features
- Upgraded the fastjson library from version 1.2.78 to 1.2.83.
- Upgraded the log4j library from version 2.16.0 to 2.18.0.
- Fixed a security vulnerability found in the fastjson and log4j library.
Fixed issues
Version 3.0.2 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues
Version 3.0.2 of the Splunk Add-on for Tomcat has the following known issues.
Third-party software attributions
Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.
A complete listing of third-party software information for this add-on is available as a text edit file for download:
Splunk Add-on for Tomcat third-party software credits.
Version 3.0.2
About this release
The log4j library used in the Splunk Add-on for Tomcat was updated to version 2.16 in December 2021. Since then log4j has released version 2.17.1 which addresses additional vulnerabilities. These vulnerabilities are rated as moderate severity and the add-on does not use the affected code path. However, this add-on will be updated to the recommended version of 2.17.1 in an upcoming release.
Version 3.0.2 of the Splunk Add-on for Tomcat was released on December 17, 2021.
Compatibility
Version 3.0.2 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 8.0.x, 8.1.x, 8.2.x |
| CIM | 4.20 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12 |
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.
New features
- Upgraded the log4j library from version 2.15.0 to 2.16.0.
- Fixed a security vulnerability found in the log4j library
Version 3.0.2
Version 3.0.2 fixed a security vulnerability found in the log4j library.
Fixed issues
Version 3.0.2 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues
Version 3.0.2 of the Splunk Add-on for Tomcat has the following known issues.
Third-party software attributions
Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.
A complete listing of third-party software information for this add-on is available as a PDF file for download:
Splunk Add-on for Tomcat third-party software credits.
Version 3.0.1
About this release
Version 3.0.1 of the Splunk Add-on for Tomcat was released on December 14, 2021.
Compatibility
Version 3.0.1 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 8.0.x, 8.1.x, 8.2.x |
| CIM | 4.20.0 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12 |
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.
New features
This release supports versions 3.0.1 of the Splunk Add-on for Tomcat.
Version 3.0.1
Version 3.0.1 fixed a security vulnerability found in the log4j library.
Fixed issues
Version 3.0.1 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues
Version 3.0.1 of the Splunk Add-on for Tomcat has the following known issues.
Third-party software attributions
Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.
A complete listing of third-party software information for this add-on is available as a PDF file for download:
Splunk Add-on for Tomcat third-party software credits.
Version 3.0.0
About this release
Version 3.0.0 of the Splunk Add-on for Tomcat was released on October 28, 2021.
Compatibility
Version 3.0.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 8.0.x, 8.1.x, 8.2.x |
| CIM | 4.20.0 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12 |
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.
New features
Version 3.0.0 of the Splunk Add-on for Tomcat has the following new features.
- Migrated the TA from setup page to a fast and intuitive UI with an improved look and feel.
- Support of the Tomcat server version 10.0.12.
- Support of multiple accounts and multiple inputs.
- Removed python2 support. Splunk only supports python3 for future releases.
- Provided server validation while configuring the account on the configuration page.
- Compatibility with CIM version 4.20.
Field changes
The following sections contain information on fields and data models that have been added, modified, or removed in this release.
Fields added and removed
No fields have been added or removed between Tomcat v2.1.0 and Tomcat v3.0.0.
Fields modified
| Sourcetype | CIM Field | Operation | Vendor Field Before | Vendor field after | Sample value before | Sample value after |
|---|---|---|---|---|---|---|
tomcat:access:log:splunk
|
category | <add> | category | category | 78 | image/gif |
tomcat:access:log:splunk
|
url_domain | <add> | url_domain | url_domain | ec2.splunkit.io | i-test-instance.ec2.splunkit.io |
tomcat:access:log:splunk
|
http_referrer_domain | <add> | http_referrer_domain | http_referrer_domain | ec2.splunkit.io | i-test-instance.ec2.splunkit.io |
CIM changes
There is no CIM addition, modification, or removal between Tomcat v2.1.0 and Tomcat v3.0.0.
Fixed issues
Version 3.0.0 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues
Version 3.0.0 of the Splunk Add-on for Tomcat has the following known issues.
| Date filed | Issue number | Description |
|---|---|---|
| 2021-10-04 | ADDON-42989, ADDON-21304 | Getting "Config file: splunk_ta_tomcat_account does not exist." error in splunk_ta_tomcat_main.log on add-on installation Workaround: This error message can be ignored safely and once the account is configured, this error message will no longer be logged. |
Third-party software attributions
Some of the components included in this add-on are licensed under free or open source licenses. We wish to thank the contributors to those projects.
A complete listing of third-party software information for this add-on is available as a PDF file for download:
Splunk Add-on for Tomcat third-party software credits.
Version 2.1.0
Version 2.1.0 of the Splunk Add-on for Tomcat was released on February 4, 2021. Version 2.1.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 7.2.x, 7.3.x, 8.0.x, 8.1.x |
| CIM | 4.18 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61 and 9.0.41 |
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.
New features
Version 2.1.0 of the Splunk Add-on for Tomcat has the following new features.
- Support for Apache Tomcat server latest version 9.0.41.
- Added the new
tomcat:access:log:splunksourcetype to fully comply with the Web CIM model. Provided guidance on configuring Tomcat logging for this new sourcetype. - Compatibility with the OpenJDK 11 and OracleJDK 11.
- Compatibility with the Common Information Model (CIM) version 4.18.
- Enhanced UX through instant validations for the fields that are required on the setup page.
Fixed issues
Version 2.1.0 of the Splunk Add-on for Tomcat has the following fixed issues.
| Date resolved | Issue number | Description |
|---|---|---|
| 2021-01-06 | ADDON-23979 | Field version_number_tmp is not getting extracted for Tomcat version 9 |
Known issues
Version 2.1.0 of the Splunk Add-on for Tomcat has the following known issues.
| Date filed | Issue number | Description |
|---|---|---|
| 2019-02-04 | ADDON-21204 | tomcat_server.conf not correctly updating to reflect changes made on setup page in UI |
| 2019-01-28 | ADDON-21046 | Setup page UI issue in Tomcat add-on 1.1.0 |
| 2016-03-17 | ADDON-8342 | Consistency required for field host on data from log files and in jmx url. |
| 2015-09-07 | ADDON-5383 | Fails to generate eventgen data on Windows platform |
| 2015-09-03 | ADDON-5325 | Support requireClientCert = true in server.conf. |
Third-party software attributions
Version 2.1.0 of the Splunk Add-on for Tomcat incorporates the following third-party software or libraries.
- slf4j
- Apache Commons Logging
- Apache log4j
- fastjson
- Apache Commons Configuration
- Apache Commons Collections
- Apache Commons Pool
- Apache Commons IO
- guava
- Httplib2
- future
Version 2.0.1
Version 2.0.1 of the Splunk Add-on for Tomcat was released on March 1, 2019. Version 2.0.1 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 7.0.x, 7.1.x, 7.2.x, 8.0.x |
| CIM | 4.13 or later |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.x or later |
New features
Version 2.0.1 of the Splunk Add-on for Tomcat has the following new features.
- Default support for Python 3
Fixed issues
Version 2.0.1 of the Splunk Add-on for Tomcat has no fixed issues.
Known issues
Version 2.0.1 of the Splunk Add-on for Tomcat has the following known issues.
| Date filed | Issue number | Description |
|---|---|---|
| 2019-10-18 | ADDON-23979 | Field version_number_tmp is not getting extracted for Tomcat version 9 |
| 2019-02-04 | ADDON-21204 | tomcat_server.conf not correctly updating to reflect changes made on setup page in UI |
| 2019-01-28 | ADDON-21046 | Setup page UI issue in Tomcat add-on 1.1.0 |
| 2019-01-22 | ADDON-21010 | Not passing validation checks in Splunk Cloud 7.0.x for GUI install |
| 2016-03-17 | ADDON-8342 | Consistency required for field host on data from log files and in jmx url. |
| 2015-09-07 | ADDON-5383 | Fails to generate eventgen data on Windows platform |
| 2015-09-03 | ADDON-5325 | Support requireClientCert = true in server.conf. |
Third-party software attributions
Version 2.0.1 of the Splunk Add-on for Tomcat incorporates the following third-party software or libraries.
Version 2.0.0
Version 2.0.0 of the Splunk Add-on for Tomcat was released on October 21, 2019. Version 2.0.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 7.0.x, 7.1.x, 7.2.x, 8.0.x |
| CIM | 4.13 or later |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.x or later |
New features
Version 2.0.0 of the Splunk Add-on for Tomcat has the following new features.
- Support for Python 3
Fixed issues
Version 2.0.0 of the Splunk Add-on for Tomcat has no fixed issues.
Known issues
Version 2.0.0 of the Splunk Add-on for Tomcat has the following known issues.
| Date filed | Issue number | Description |
|---|---|---|
| 2019-10-18 | ADDON-23979 | Field version_number_tmp is not getting extracted for Tomcat version 9 |
| 2019-02-04 | ADDON-21204 | tomcat_server.conf not correctly updating to reflect changes made on setup page in UI |
| 2019-01-28 | ADDON-21046 | Setup page UI issue in Tomcat add-on 1.1.0 |
| 2019-01-22 | ADDON-21010 | Not passing validation checks in Splunk Cloud 7.0.x for GUI install |
| 2016-03-17 | ADDON-8342 | Consistency required for field host on data from log files and in jmx url. |
| 2015-09-07 | ADDON-5383 | Fails to generate eventgen data on Windows platform |
| 2015-09-03 | ADDON-5325 | Support requireClientCert = true in server.conf. |
Third-party software attributions
Version 2.0.0 of the Splunk Add-on for Tomcat incorporates the following third-party software or libraries.
- slf4j
- Apache Commons Logging
- Apache log4j
- fastjson
- Apache Commons Configuration
- Apache Commons Collections
- Apache Commons Pool
- Apache Commons IO
- guava
- Httplib2
- future
Version 1.1.0
About this release
Version 1.1.0 of the Splunk Add-on for Tomcat was released on April 1, 2016. Version 1.1.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Splunk software versions | 6.5.x, 6.6.x, 7.0.x, 7.1.x, 7.2.x |
| CIM | 4.2 or later |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.x or later |
New features
Version 1.1.0 of the Splunk Add-on for Tomcat has the following new features.
| Date | Issue number | Description |
|---|---|---|
| 2015-10-19 | ADDON-6103 | ITSI AppServer module integration: modify the Splunk Add-on for Tomcat to collect the necessary data for populating the inventory and recommended KPIs for ITSI AppServer module. |
| 2016-03-16 | ADDON-8322 | Add the following new JMX templates to support mapping to the AppServer ITSI module: tomcat_connector, tomcat_global_request_processor, tomcat_webapp_class_loader, tomcat_manager. |
| 2016-03-16 | ADDON-8321 | Add theTomcat version number and Tomcat application server saved searches. |
| 2016-02-18 | ADDON-7832 | Add extraction and mapping for two additional fields: thread_id and thread_state.
|
Fixed issues
Version 1.1.0 of the Splunk Add-on for Tomcat has no fixed issues.
Known issues
Version 1.1.0 of the Splunk Add-on for Tomcat has the following known issues.
| Date filed | Issue number | Description |
|---|---|---|
| 2016-03-17 | ADDON-8342 | When configuring a JMX input using the "Use URL directly" method, the admin needs to use a hostname rather than an IP address so that the host field will be consistent. |
| 2016-01-30 | ADDON-7646 | FIPS mode is not supported by this add-on. For a workaround, see Add-ons and FIPS mode in the Splunk Add-ons manual. |
| 2016-01-13 | ADDON-5325 | requireClientCert=true in server.conf is not supported by add-ons using modular inputs and REST. If this setting is enabled in server.conf, communication is broken between the modular input and splunkd and the add-on stops collecting data. The following error appears in the splunkd.log: "SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate." The workaround is to set requireClientCert=false.
|
| 2015-09-09 | ADDON-5437 | If the Splunk Add-on for ServiceNow or the Splunk Add-on for Box is installed and data inputs have been configured in one of these add-ons, then the inputs are disabled, the Splunk Add-on for JMX is unable to get data from a configured Tomcat server. This affects Splunk Add-on for JMX 3.0.2 or older. |
| 2015-09-07 | ADDON-5383 /APPSC-432 | Fails to generate eventgen data on Windows platform. |
Third-party software attributions
Version 1.1.0 of the Splunk Add-on for Tomcat incorporates the following third-party software or libraries.
- slf4j
- Apache Commons Logging
- Apache log4j
- fastjson
- Apache Commons Configuration
- Apache Commons Collections
- Apache Commons Pool
- Apache Commons IO
- guava
Version 1.0.0
Version 1.0.0 of the Splunk Add-on for Tomcat has the same compatibility specifications as version 1.1.0.
New features
Version 1.0.0 of the Splunk Add-on for Tomcat had the following new feature.
| Date | Issue number | Description |
|---|---|---|
| 2015-09-10 | ADDON-4795 | Create a new add-on for Apache Tomcat java server. |
Known issues
Version 1.0.0 of the Splunk Add-on for Tomcat had the following known issues.
| Date filed | Defect number | Description |
|---|---|---|
| 2016-01-30 | ADDON-7646 | FIPS mode is not supported by this add-on. For a workaround, see Add-ons and FIPS mode in the Splunk Add-ons manual. |
| 2016-01-13 | ADDON-5325 | requireClientCert=true in server.conf is not supported by add-ons using modular inputs and REST. If this setting is enabled in server.conf, communication is broken between the modular input and splunkd and the add-on stops collecting data. The following error appears in the splunkd.log: "SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate." The workaround is to set requireClientCert=false.
|
| 2015-09-09 | ADDON-5437 | If the Splunk Add-on for ServiceNow or the Splunk Add-on for Box is installed and data inputs have been configured in one of these add-ons, then the inputs are disabled, the Splunk Add-on for JMX is unable to get data from a configured Tomcat server. This affects Splunk Add-on for JMX 3.0.2 or older. |
Third-party software attributions
Version 1.0.0 of the Splunk Add-on for Tomcat incorporated the following third-party software or libraries.
| Release notes for the Splunk Add-on for Tomcat |
This documentation applies to the following versions of Splunk® Supported Add-ons: released
Download manual
Feedback submitted, thanks!