Release notes for the Splunk Add-on for Windows

Version 8.8.0 of the Splunk Add-on for Windows was released on August 3, 2023.

The Splunk Add-on for Windows DNS version 1.0.1 and the Splunk Add-on for Windows Active Directory version 1.0.0 are not supported when installed alongside the Splunk Add-on for Windows versions 6.0.0 and higher. The Splunk Add-on for Windows versions 6.0.0 and higher includes the Splunk Add-on for Windows DNS and the Splunk Add-on for Microsoft Active Directory.

Compatibility

Version 8.8.0 of the Splunk Add-on for Windows is compatible with the following software, CIM versions, and platforms:

Splunk platform versions	8.1.x, 8.2.x, 9.0.x
CIM	4.15 and later
Platform	Windows
Vendor Products	Windows Server 2022, Windows 11, Windows Server 2019, Windows 8.1, Windows 10, Windows Server 2012/2012 R2, Windows Server 2016, Microsoft Active Directory, Microsoft Windows DNS Server

New or changed features

Version 8.8.0 of the Splunk Add-on for Windows has the following new or changed features:

• Added a new data input to collect BIOS data from Windows hosts. See Collect BIOS data from the Windows Host Machine for more details on this data input and how to use it.

Fixed Issues

Version 8.8.0 of the Splunk Add-on for Windows fixes the following issues:

Date resolved	Issue number	Description
2023-07-17	ADDON-61962	Group_Name field extraction of windows security classic event for EventCode 4756

Known Issues

Version 8.8.0 of the Splunk Add-on for Windows contains the following known issues. If no issues appear below, no issues have yet been reported:

Date filed	Issue number	Description
2022-07-21	ADDON-54050	Parsing does not work properly when a nested XML event is encoded.
2018-09-06	ADDON-19338	Data duplication issue in WindowsUpdate.Log