Update changelog for newer Windows TA

swisscom · Feb 13, 2020 · baa28d6 · baa28d6
1 parent 972c806
commit baa28d6
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/ta-microsoft-powershell/README.md b/ta-microsoft-powershell/README.md
@@ -1,11 +1,16 @@
 # TA-Microsoft-PowerShell
 
 * Author: Swisscom CSIRT, Swisscom (Schweiz) AG
-* Sourcetype: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational
+* Source: XmlWinEventLog:Microsoft-Windows-PowerShell/Operational
 * Has index-time ops: false
 
 # Update History
 
+## 0.2.0 - 2020-02-13
+
+* Update to work with the new Splunk_TA_windows v5 and onwards - https://docs.splunk.com/Documentation/WindowsAddOn/5.0.1/User/Upgrade#Upgrade_from_version_4.8.4_to_version_5.0.1
+* All searches,reports and dashboards using `sourcetype="XmlWinEventLog:Microsoft-Windows-PowerShell/Operational"` need to use `source="XmlWinEventLog:Microsoft-Windows-PowerShell/Operational"` instead, due to the upgrade to Splunk_TA_windows v5
+
 ## 0.1.0 - 2019-03-01
 * Add initial PowerShell event log field extraction
 * Tested with PowerShell 5.1