Skip to content

Release notes for the Splunk Add-on for CyberArk EPM

Version 3.1.0 of the Splunk Add-on for CyberArk EPM was released on July 24, 2025.

About this release

Version 3.1.0 of the Splunk Add-on for CyberArk EPM is compatible with the following software, CIM versions, and platforms.

Component Description
Splunk platform versions 9.x, 10.0.x
CIM 6.1.0
Platforms Platform independent
Vendor Products CyberArk Endpoint Privilege Manager v21.1, v23.3.0, v24.5.0, v25.6.1

New features

  • Added support for SetID Filter in the input configuration. A new SetID filter option was added to the following inputs:

    • Admin Audit Logs
    • Inbox Events
    • Policy Audit Events

    • Policies and Computers

      This enhancement introduces a dropdown menu in the input configuration, allowing you to filter event data based on specific SetIDs and collect events specific to the selected SetID.

    Note

    The SetID value will now appear in the raw events for the inputs listed in this section.

  • The Common Information Model (CIM) was upgraded from version 5.3.2 to 6.1.0 to maintain compatibility with the latest data models and Splunk best practices.

  • Added support of CyberArk EPM API v25.6.1

Fixed issues

Version 3.1.0 of the Splunk Add-on for CyberArk EPM has the following fixed issues. If no issues appear in this section, no issues have yet been reported:

Known issues

Version 3.1.0 of the Splunk Add-on for CyberArk EPM has the following reported known issues. If no issues appear in this section, no issues have yet been reported: