Splunk® Enterprise Security

Release Notes

The documentation for Splunk Enterprise Security versions 8.0 and higher have been rearchitected from previous versions, causing some links to have redirect errors. For documentation on version 8.0, see Splunk Enterprise Security documentation homepage.
This documentation does not apply to the most recent version of Splunk® Enterprise Security. For documentation on the most recent version, go to the latest release.

Fixed issues for Splunk Enterprise Security

Splunk Enterprise Security 7.1.1 was released on April 5, 2023. For more information on release dates for the major versions of Splunk Enterprise Security, see Software Support Policy page.

This release includes fixes for the following issues:


Date resolved Issue number Description
2023-08-14 SOLNESS-34301 Console JS Error when trying to open Risk Event Timeline for risk notable
2023-04-05 SOLNESS-34719 Performance of Enterprise Security might be impacted if the modular_action_invocations takes too long to run.
2023-03-27 SOLNESS-35220 Behavioral Analytics panel might not display in the General Settings page even if the service is enabled.
2023-03-16 SOLNESS-35064 Search cannot be added to the Splunk Enterprise Security analytic story.
2023-03-01 SOLNESS-34928 Users cannot create tokens if "admin" is hardcoded in splunkd when the token is created.
2023-02-28 SOLNESS-34766 Users with the role sc_admin are unable to edit UDF dashboards.
2023-02-27 SOLNESS-34582 Update the language for field and field description in Correlation Search Editor.
2023-02-27 SOLNESS-34842 Broken help link ("Learn more") link on the UDF modal.
2023-02-23 SOLNESS-34771 Visibility issues in the "Enable behavioral analytics service" panel in the light or enterprise theme.
2023-02-21 SOLNESS-34918 The search "Threat - Correlation Searches - Lookup Gen" requests all the fields from the /saved/searches endpoint.
2023-02-14 SOLNESS-34278 Failed to clone search - ES 7.0.2
2023-01-20 SOLNESS-34200 Workflow actions do not work as expected.
2023-01-11 SOLNESS-34219 Workflow action on ES does not populate the $field$ in Incident Review.
Last modified on 08 November, 2023
Release notes for Splunk Enterprise Security   Known issues for Splunk Enterprise Security

This documentation applies to the following versions of Splunk® Enterprise Security: 7.1.1

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters