Release notes for the Splunk Add-on for Microsoft Office 365¶
Version 6.1.1 of the Splunk Add-on for Microsoft Office 365 was released
on
Note
Microsoft removed the Cloud Discovery endpoint for Cloud App Security. Cloud Discovery inputs do not collect events; if configured, the add-on skips collection for this content type and logs a warning.
Note
Version 4.3.0 and higher is expected to have around 1% of event duplication for the Management Activity input in the Splunk platform due to duplicate events from the Microsoft API.
Compatibility¶
Version 6.1.1 of the Splunk Add-on for Microsoft Office 365 is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk platform versions | 9.3.x, 9.4.x, 10.0.x, 10.1.x, 10.2.x, 10.3.x, 10.4.x, 10.5.x |
| CIM | 5.1.0 |
| Supported OS | Platform independent (MacOS is not supported) |
| Vendor products | Microsoft Office 365 |
New features¶
Version 6.1.1 of the Splunk Add-on for Microsoft Office 365 has the following new features:
- Cloud Discovery inputs now skip collection and log a warning because Microsoft removed the endpoint.
- Corrected CIM mappings for SecurityComplianceCenter and AirInvestigation alerts.
Fixed issues¶
Version 6.1.1 of the Splunk Add-on for Microsoft Office 365 contains the following, if any, fixed issues.
Known issues¶
Version 6.1.1 of the Splunk Add-on for Microsoft Office 365 contains the following, if any, known issues.
Third-party software attributions¶
Version 6.1.1 of the Splunk Add-on for Microsoft Office 365 incorporates the following third-party software or libraries.
Third-party software attributions for the Splunk Add-on for Microsoft Office 365