Releases: PaloAltoNetworks/Splunk-Apps
Releases · PaloAltoNetworks/Splunk-Apps
v4.2.2
- Fix drilldowns in Wildfire and Content dashboards
- Fix panel in Content dashboard to display correct data
v4.2.1
- Fix Wildfire Report downloader and Applipedia New App check
- Fix Wildfire Dashboard Drilldowns
- Fix Threat Details Dashboard datamodel reference
- Fix Endpoint Dashboard would not work on Splunk 6.0.x
- Fix time range inconsistent on Overview Dashboard
- Fix issue where Endpoint Dashboard disappears if Netflow is enabled.
v4.2
- New Palo Alto Networks Advanced Endpoint Protection
- Support Palo Alto Networks PAN-OS 6.1
v4.1.3
- Special commands (panblock, panupdate, pantag) now available from other apps
- Fix issue with unknown lookup errors during search
- Fix issue with meta scope and global namespace
v4.1.2
- Fix some Threat dashboard drilldowns
- Fix scope of CIM fields to remove conflict with some apps
- Remove macros from datamodel that were causing slower acceleration
Note: changes to datamodel may require the acceleration to be rebuilt before data will show up in the dashboards
v4.1.1
- Handle new fields in latest PAN-OS syslogs and WildFire reports
- Significant improvements to indexing efficiency
- Improved handling of Dynamic Address Group tagging
- Improvements and minor updates for Splunk 6.1.x
- Fix minor dashboard issues
- Fix minor field parsing issue
v4.1
This is a major update. If upgrading from a previous version, please read the Upgrade Notes in the documentation.
- PAN-OS Data model including acceleration
- Data model accelerated dashboards (replaces TSIDX-based dashboards)
- New command:
pantag
- tag IP addresses on the firewall into Dynamic Address Groups - IP Classification - add metadata to your CIDR blocks, classifying them as internet/external/dmz/datacenter/etc.
- Applipedia change notifications and highlighting - know when Palo Alto Networks releases new application signatures and if those applications are on your network
v4.0.2
- Fix: Overview dashboard optimizations
- Fix: Top Applications panel would sometimes show error
- Fix: Traffic dashboard form filter works
v4.0.1
- Fix: Config dashboard shows all events
- Fix: Better handling of navbar changes
v4.0
- Splunk 6 support
- Dashboards converted to Splunk 6 SimpleXML, meaning dashboards can now:
- Export as pdf
- Produce scheduled reports
- Use pre-populated dropdowns in filters
- Change using SplunkWeb by editing the panels
- Maps converted to Splunk 6 built-in maps (removes dependencies on other apps)
- Updated navbar including icons and colors