Fixed issues for Splunk Enterprise Security
Splunk Enterprise Security version 4.7.0 was released on April 21, 2017 and includes the following fixed issues.
Highlighted issues
Date resolved | Issue number | Description |
---|---|---|
2017-03-02 | SOLNESS-11375 | Simple XML: Editing dashboards via UI with Splunk platform 6.5.x+ results in malformed fieldset ("Search is waiting for input"). |
Uncategorized issues
Date resolved | Issue number | Description |
---|---|---|
2017-03-30 | SOLNESS-11808 | contentinfo custom search command incorrectly listed as "deprecated" |
2017-03-30 | SOLNESS-11869 | confcheck_es_app_version missing from inputs.conf |
2017-03-27 | SOLNESS-11818, CIM-526 | rest with splunk_server=* does not return information from other search peers; use splunk_server=local |
2017-03-23 | SOLNESS-11703 | Asset correlation: add "ip" output field only to non-CIDR lookups |
2017-03-13 | SOLNESS-11236, SOLNESS-10834 | 4.5.1: confcheck_failed_threatlist_download incorrectly reports failure after successful download |
2017-02-14 | SOLNESS-11380 | IOC Manual Uploads and Parsing Issues |
2017-02-13 | SOLNESS-11472 | TA-ueba saves outputs.conf to search app |
2017-02-08 | SOLNESS-11473 | Asset and Identity Center Category Issue |
2017-02-07 | SOLNESS-10347 | Adaptive response actions fail without a displayed error message |
2017-02-01 | SOLNESS-11409 | IR only edits 1000 events at a time and silently fails to edit events > 1000 |
2017-01-27 | SOLNESS-11425 | General Settings: settings with endpoint defined by different apps are not displayed |
2017-01-24 | SOLNESS-11184 | Correlation Search Editor: Pressing the "Enter" key leads to unexpected behavior |
2017-01-20 | SOLNESS-11374 | Threatlist lookup-gen savedsearches have invalid cron schedule |
2017-01-17 | SOLNESS-11273 | Create Capture page cannot create a new capture |
2017-01-13 | SOLNESS-11266 | Content Management: enables related searches in improper app context |
2017-01-12 | SOLNESS-11267 | Converting between realtime and scheduled correlation searches does not change the search |
2017-01-09 | SOLNESS-11192, SOLNESS-10232 | Correlation Search Editor: Cannot save after removing email action with invalid address |
2016-12-14 | SOLNESS-11113 | Incident Review: Edit Job Settings doesn't work |
This documentation applies to the following versions of Splunk® Enterprise Security: 4.7.0
Feedback submitted, thanks!