4.1.0

Version 4.1.0

What is new

• Added an input for Microsoft Entra ID Applications. Issue #27
• Added an input for Microsoft Graph Security API

What changed?

• Deprecated the Azure Metrics input. This functionality has moved to the Splunk Add-on for Microsoft Cloud Services.

• Deprecated the Azure Subscriptions input. This functionality has moved to the Splunk Add-on for Microsoft Cloud Services.

• Deprecated the Azure Resource Groups input. This functionality has moved to the Splunk Add-on for Microsoft Cloud Services.

• Deprecated the Azure Virtual Networks input. This functionality has moved to the Splunk Add-on for Microsoft Cloud Services.

• Deprecated the Azure Compute input. This functionality has moved to the Splunk Add-on for Microsoft Cloud Services.

• Deprecated the Azure KQL Log Analytics input. This functionality has moved to the Splunk Add-on for Microsoft Cloud Services.

• Deprecated the Azure Billing and Consumption input. This functionality has moved to the Splunk Add-on for Microsoft Cloud Services.

• Deprecated the Azure Azure Reservation Recommendation input. This functionality has moved to the Splunk Add-on for Microsoft Cloud Services.

• Changed Azure Acitvie Directory references to Microsoft Entra ID

• Fix - set default values for inputs that use a Graph endpoint to address add-on upgrade issues. Issue #21

• Fix - Azure AD Sign-in and Audit inputs would raise an error if a Start Date parameter contained a time zone. Issue #16

• Fix - the index_stats option was ignored in the KQL input. Issue #25

Full Changelog: v4.0.3...v4.1.0

4.0.3

• Fix - problem loading some inputs on Windows system. Issue #8 and Issue #12
• Added name parameter to the [id] stanza in default/app.conf
• Bumped splunktaucclib to version 6.0.6 to address potential credential corruption issues
• Fix - errant newline in eventtypes.conf for azure_vuln stanza. Issue #19
• Fix - nextLink parameter is different for consumption input causing limited results. Issue #20
• Increase REST request timeout to 60 seconds

Full Changelog: 4.0.2...v4.0.3

4.0.2

What's Changed

Other Changes

• Adding CIM Mapping for Vulnerabilities Datamodel by @dluxtron in #2
• Azure ad audit fix issue #3 by @JasonConger in #4
• fix: bug fix for pagination issue by @JasonConger in #5
• fix: fixed issue with Azure AD audit input creation by @JasonConger in #6

New Contributors

• @dluxtron made their first contribution in #2

Full Changelog: v4.0.0...4.0.2

v4.0.0

Full Changelog: https://github.com/splunk/splunk-add-on-microsoft-azure/commits/v4.0.0