Version 5.4.11

Latest May 1, 2026
Documentation
  • New: Documentation website! — Retired the old SCMA Google Doc (RIP — it had gone 404 and was haunting the internet as a ghost link) and replaced it with a proper, hosted documentation site styled as close as possible after our beloved Splunk Docs. Covers installation, how checks work, the full checks reference, troubleshooting, FAQ, and how-to guides.
  • Documentation links in the SCMA App now point to the hosted SCMA docs site from Setup, Checks, and Search Troubleshooting.
  • Setup highlights the documentation entry point more clearly for new installs.
Splunkbase Catalog
  • Fixed rebuilding the Splunkbase apps catalog from the IS4S gzip feed: correct gzip handling, more reliable download path and error reporting, search pipeline fixes for inputlookup/append, and clearer failures in the Setup UI (including surfacing command stderr).
Cryptographic Hashing in SPL
  • Replaced MD5 with SHA-256 (sha256()) for redaction and fingerprinting across saved searches, macros, embedded check SPL, and related dashboards. Redacted strings and checksum labels change accordingly (for example fingerprint prefixes updated to match SHA-256).
Forwarder Compatibility Check — SCMA-035
  • Extended the supported forwarder matrix for Splunk 10.x (including UF/heavy patterns through current 10.x lines), with updates to check metadata, compatibility text, and the forwarder topology dashboard (including wider layout and result limits where applicable).
Splunk SOAR Naming
  • User-visible "Phantom" wording updated to Splunk SOAR in scoping overview, saved searches, KPIs, and lookups.
Navigation Cleanup
  • Removed Application Migration and ACS Helper entries from the SCMA app navigation menu.

Version 5.4.10

Previous August 4, 2025
Checks
  • Updated forwarder inventory check to support Splunk v9.4.
  • Fixed a bug where inputs_hec_check was not reporting proper volume and event count.
  • Minor optimizations completed for specific checks.
FedRAMP
  • Disabled upload functionality for FedRAMP exports.
  • Added UI warning for FedRAMP exports.
Compatibility
  • Added support for Python 3.

Version 5.4.9

Previous March 17, 2025
  • Bug fix for the Data Egress Calculator.
  • Security improvement.