Release Notes for the Splunk App for PCI Compliance

Version 5.3.1 of the Splunk App for PCI Compliance was released on March 27, 2024.

The Splunk App for PCI Compliance (for Splunk Enterprise) includes framework improvements from the Splunk Enterprise Security framework. See Release notes for Splunk Enterprise Security.

The installer package size is >500MB, which is larger than the default upload limit for installing apps from the SplunkWeb UI. See Install the Splunk App for PCI Compliance in the Installation and Configuration Manual.

What's new

Splunk app for PCI Compliance includes the following new enhancements:

Enhancement	Description
Updates to detection rules and reports	Enhancements to detection rules and reports for PCI DSS 4.0 governance controls. For more information, see Updates to detection rules and reports by enhancements.
Updates to existing dashboard	A new panel Vulnerability by Severity is added to the Vulnerability Scan Details dashboard.

Version specific notes

ES or PCI version	Version specific notes
ES 7.2 or higher	Ability to display the PCI control field such as 1.2.2 or 8.3, and so on for notables on the Incident Review page. When a notable is created, all the PCI controls associated with the notable can be viewed using a search and shared with other users.
ES 6.1.x or higher	Splunk Enterprise Security is supported on Python3 and requires a minimum of Splunk Enterprise 8.0.x. See Python with Splunk Enterprise Security in the Splunk Enterprise Python 3 Migration manual.
PCI 4.6.0 or higher	To enhance product security, jQuery is migrated from 2.1.0 to 3.5.0 and some Splunk Web Core UI components are deprecated. Library updates have been made that might impact some dashboards with CustomJS.

Compatibility

See Install prerequisites in the Installation and Upgrade Manual for information about the Splunk App for PCI Compliance and compatibility with the Splunk platform and Splunk Enterprise Security.

Support

• Visit Splunk Answers to ask questions of the Splunk community.
• Access the #splunk IRC channel on EFnet.
• For assistance with an issue, file a case using the Splunk Support Portal.
• For assistance installing, upgrading, or scaling a Splunk App for PCI Compliance deployment, contact the Splunk Professional Services team.