# Release Notes

• Added CSV lookup for ES to use.
• Added Serial Number to category field - feature request #67

• Disabled KVstore replication to improve performance.
• Increased batch size of KVstore lookup to improve performance.
• Removed type definition for KVstore fields.

• Fixed location of the "static" directory. Moved from the "default" directory to the project root.

• Added managed configurations for Splunk Enterprise Security to control retention of lookup file --> Schedule Search

• Deprecating use of the search macro "sa_crowdstrike_retention" and the corresponding saved search.

• SplunkWorks updates

This release has no functional changes of the add-on.

Released: April 19, 2023

• New format for the category field, see Category.
  • The cs_ prefix has been removed from many fields.
  • Spaces have been added for easier readability.

• Hotfix for priority field failing default regex match

• Added macro and retention definition to the General Settings in Splunk Enterprise Security

• Added managed configuration to Splunk Enterprise Security

• Fixed incorrect mac field (Thanks @PaddlingCode )

• added cleanup search to remove old/stale devices
• added search macro for device retention period

• updated collection to include last seen field
• updated lookup generating search to include last time seen

• added first_seen, last_seen, and last_updated to category field
• added site_name to existing bunit field

• Changed app logo background to transparent.
• Updated saved search to preserve hosts with multiple IP/MAC addresses