Getting Started
Release Notes
What's new, fixed, and changed in each version of the SCMA app.
Version 5.4.11
Latest May 1, 2026Documentation
- New: Documentation website! — Retired the old SCMA Google Doc (RIP — it had gone 404 and was haunting the internet as a ghost link) and replaced it with a proper, hosted documentation site styled as close as possible after our beloved Splunk Docs. Covers installation, how checks work, the full checks reference, troubleshooting, FAQ, and how-to guides.
- Documentation links in the SCMA App now point to the hosted SCMA docs site from Setup, Checks, and Search Troubleshooting.
- Setup highlights the documentation entry point more clearly for new installs.
Splunkbase Catalog
- Fixed rebuilding the Splunkbase apps catalog from the IS4S gzip feed: correct gzip handling, more reliable download path and error reporting, search pipeline fixes for
inputlookup/append, and clearer failures in the Setup UI (including surfacing command stderr).
Cryptographic Hashing in SPL
- Replaced MD5 with SHA-256 (
sha256()) for redaction and fingerprinting across saved searches, macros, embedded check SPL, and related dashboards. Redacted strings and checksum labels change accordingly (for example fingerprint prefixes updated to match SHA-256).
Forwarder Compatibility Check — SCMA-035
- Extended the supported forwarder matrix for Splunk 10.x (including UF/heavy patterns through current 10.x lines), with updates to check metadata, compatibility text, and the forwarder topology dashboard (including wider layout and result limits where applicable).
Splunk SOAR Naming
- User-visible "Phantom" wording updated to Splunk SOAR in scoping overview, saved searches, KPIs, and lookups.
Navigation Cleanup
- Removed Application Migration and ACS Helper entries from the SCMA app navigation menu.
Version 5.4.10
Previous August 4, 2025Checks
- Updated forwarder inventory check to support Splunk v9.4.
- Fixed a bug where
inputs_hec_checkwas not reporting proper volume and event count. - Minor optimizations completed for specific checks.
FedRAMP
- Disabled upload functionality for FedRAMP exports.
- Added UI warning for FedRAMP exports.
Compatibility
- Added support for Python 3.
Version 5.4.9
Previous March 17, 2025- Bug fix for the Data Egress Calculator.
- Security improvement.