Splunk® Enterprise Security

Release Notes

Acrobat logo Download manual as PDF


Acrobat logo Download topic as PDF

Fixed issues for Splunk Enterprise Security

Splunk Enterprise Security 7.0.1 was released on March 23, 2022. For more information on release dates for the major versions of Splunk Enterprise Security, see Software Support Policy page.

This release includes fixes for the following issues:


Date resolved Issue number Description
2022-03-23 SOLNESS-29317 The Risk Factor editor should update the risk factors in the SPL preview when the risk factor is changed.
2022-03-23 SOLNESS-29516 The inputintelligence custom search command that converts non-threat intelligence as CSV, fails to parse with a "dict contains fields not in fieldnames:" error.
2022-02-28 SOLNESS-29960 Investigation summary does not display all the columns correctly when notable events contain long fields and nonbreaking values.
2022-02-18 SOLNESS-27588 URL of the Splunk Platform instance is added to the URL of the Incident Review workflow action link resulting in a 404 error.
2022-02-16 SOLNESS-29139 Splunk Enterprise Security is unable to read the entire threat intelligence feed when using TAXII protocol due to pagination issues.
2022-01-26 SOLNESS-29684 The "Add a Collaborator" and "Active Collaborator" buttons are grayed out in the Investigations page.
2022-01-26 SOLNESS-29306 Excessive long non-breaking string field values causes navigation issues in the Incident Review page.
2022-01-10 SOLNESS-28926 Error using Risk Factor Editor with a custom role that has "edit_risk_factor" capability.
2022-01-05 SOLNESS-29293 MITRE annotations do not populate for non-English locales.
2022-01-05 SOLNESS-29301 Error in search-driven lookups caused by endpoint gated by administrator privileges.
2022-01-05 SOLNESS-26883 Annotations configured on correlation search editor do not display on the Incident Review page.
2021-12-13 SOLNESS-29300 Errors with managed roles when loading the Permissions Manager page.
2021-12-13 SOLNESS-29277 After a page refresh, the users who were added to an investigation were not displaying as part of the investigation.
2021-12-06 SOLNESS-27288 The Submit button on the Incident Review page is grayed out when filters are cleared.
Last modified on 24 March, 2022
PREVIOUS
Release notes for Splunk Enterprise Security
  NEXT
Known issues for Splunk Enterprise Security

This documentation applies to the following versions of Splunk® Enterprise Security: 7.0.1


Was this documentation topic helpful?


You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters