Release history for the Splunk Add-on for Microsoft SQL Server¶
The latest release for the Splunk Add-on for Microsoft SQL Server is version 3.1.0. See Release notes for the Splunk Add-on for Microsoft SQL Server.
Version 3.0.0¶
Compatibility¶
Version 3.0.0 of the Splunk Add-on for Microsoft SQL Server is compatible with the following software, CIM versions, and platforms:
| Category | Details |
|---|---|
| Splunk platform versions | 8.1.x and 8.2.x |
| Splunk DB Connect | 3.7.0 |
| CIM | 4.20 |
| Platforms | Windows for local data collection on MS SQL Server, platform independent otherwise |
| Vendor Products | Microsoft SQL Server 2012 Enterprise, Microsoft SQL Server 2014 Enterprise, Microsoft SQL Server 2016 Enterprise, Microsoft SQL Server 2017 Enterprise, Microsoft SQL Server 2017 Standard, Microsoft SQL Server 2019 Enterprise, Microsoft SQL Server 2019 Standard |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
- Support for Microsoft SQL Server Standard 2019.
- Drop support for Splunk DB 2.x.x.
- Compatibility with Splunk DB 3.6.0 and later.
Common Information Model (CIM) enhancements:
- Added new field extractions for the
mssql:auditsourcetype. - Support for version 4.20.
For information on upgrading to the newest version of this add-on, see the Upgrade the Splunk Add-on for Microsoft SQL Server topic in this manual.
Known issues¶
Version 3.0.0 of the Splunk Add-on for Microsoft SQL Server has the following known issues.
If no issues appear in this section, no issues have yet been reported:
Third-party software attributions¶
Version 3.0.0 of the Splunk Add-on for Microsoft SQL Server does not incorporate any third-party components or libraries.
Version 2.0.0¶
Compatibility¶
Version 2.0.0 of the Splunk Add-on for Microsoft SQL Server is compatible with the following software, CIM versions, and platforms:
| Category | Details |
|---|---|
| Splunk platform versions | 7.2.x, 7.3.x, 8.0.x and 8.1.0 |
| Splunk DB Connect | 2.4.1, 3.1.3, 3.3.1 and 3.4.0 |
| CIM | 4.17 |
| Platforms | Windows for local data collection on MS SQL Server, platform independent otherwise |
| Vendor products | Microsoft SQL Server 2012 Enterprise, Microsoft SQL Server 2014 Enterprise, Microsoft SQL Server 2016 Enterprise, Microsoft SQL Server 2017 Enterprise, Microsoft SQL Server 2017 Standard, Microsoft SQL Server 2019 Enterprise, Microsoft SQL Server 2019 Standard. |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
- Support for Microsoft SQL Server Standard 2017 and Microsoft SQL Server Enterprise 2019.
- Compatibility with Splunk DB Connect 3.3.1 and 3.4.0.
- Added field extractions for the
mssql:errorlogandmssql:agentlogsourcetypes. - Removed the search time extractions of the
hostandportfield. - The value of the host will be the same as the host provided at the time of connection in Splunk DB Connect.
- For the port field, updated the SQL queries so it will be populated at index-time in the event.
- Common Information Model (CIM) enhancements:
- Support for version 4.17.
- Authentication data model mapping for the logon events in the
mssql:errorlogsourcetype. - Databases data model mapping for the
mssql:databasessourcetype. - Removed the
serial_numfield from themssql:transaction:dm_tran_lockssourcetype. - Additional Splunk IT Service Intelligence (ITSI) database module field compatibility.
For information on upgrading to the newest version of this add-on, see the Upgrade the Splunk Add-on for Microsoft SQL Server topic in this manual.
Fixed issues¶
Version 2.0.0 of the Splunk Add-on for Microsoft SQL Server has the following fixed issues.
Known issues¶
Version 2.0.0 of the Splunk Add-on for Microsoft SQL Server has the following known issues.
If no issues appear in this section, no issues have yet been reported:
Third-party software attributions¶
Version 2.0.0 of the Splunk Add-on for Microsoft SQL Server does not incorporate any third-party components or libraries.
Version 1.4.0¶
Version 1.4.0 of the Splunk Add-on for Microsoft SQL Server was released on August 2, 2018.
Compatibility¶
Version 1.4.0 of the Splunk Add-on for Microsoft SQL Server is compatible with the following software, CIM versions, and platforms:
| Category | Details |
|---|---|
| Splunk platform versions | 6.6.x, 7.0.x, 7.1.x, 7.2.x, 8.0 |
| Splunk DB Connect | 2.4.1, 3.1.3 |
| CIM | 4.11 |
| Platforms | Windows for local data collection on MS SQL Server, platform independent otherwise |
| Vendor Products | Microsoft SQL Server 2008 R2 Enterprise, Microsoft SQL Server 2012 Enterprise, Microsoft SQL Server 2014 Enterprise, Microsoft SQL Server 2016 Enterprise |
New features¶
- Support for Microsoft SQL Server 2016
- Compatibility with Splunk Enterprise 7+
Known issues¶
Version 1.4.0 of the Splunk Add-on for Microsoft SQL Server has the following known issues.
If no issues appear in this section, no issues have yet been reported:
Third-party software attributions¶
Version 1.4.0 of the Splunk Add-on for Microsoft SQL Server does not incorporate any third-party components or libraries.
Version 1.3.0¶
Compatibility¶
Version 1.3.0 of the Splunk Add-on for Microsoft SQL Server is compatible with the following software, CIM versions, and platforms:
| Category | Details |
|---|---|
| Splunk platform versions | 6.4 and later |
| Splunk DB Connect | 2.4.1, 3.1.3 (versions 1.x and 3.0 are not supported) |
| CIM | 4.1 and later |
| Platforms | Windows for local data collection on MS SQL Server, platform independent otherwise |
| Vendor Products | Microsoft SQL Server versions 2008 R2 Enterprise, 2012 Enterprise, and 2014 Enterprise |
New features¶
Version 1.3.0 of the Splunk Add-on for Microsoft SQL Server provides added support for DB Connect 3.1, which significantly streamlines the configuration process of database inputs.
Third-party software attributions¶
Version 1.3.0 of the Splunk Add-on for Microsoft SQL Server does not incorporate any third-party components or libraries.
Version 1.2.0¶
Compatibility¶
Version 1.2.0 of the Splunk Add-on for Microsoft SQL Server was released on April 1, 2016. Version 1.2.0 of the Splunk Add-on for Microsoft SQL Server is compatible with the following software, CIM versions, and platforms:
| Category | Details |
|---|---|
| Splunk platform versions | 6.1 and later |
| CIM | 4.1 and later |
| Platforms | Windows for local data collection on MS SQL Server, platform independent otherwise |
| Vendor Products | Microsoft SQL Server versions 2008 R2 Enterprise, 2012 Enterprise, and 2014 Enterprise |
New features¶
Version 1.2.0 of the Splunk Add-on for Microsoft SQL Server has the following new features:
- Support for the IT Service Intelligence Database module, including new source types, new lookup file, and new SQL queries for DB Connect v2.
Known issues¶
Version 1.2.0 of the Splunk Add-on for Microsoft SQL Server has the following known issues:
Note that there is a known issue in DB Connect 3 to support a new installation of Splunk Add-on for Microsoft SQL Server. See release notes for DB Connect 3 for details.
Third-party software attributions¶
Version 1.2.0 of the Splunk Add-on for Microsoft SQL Server does not incorporate any third-party components or libraries.
Version 1.1.0¶
Version 1.1.0 of the Splunk Add-on for Microsoft SQL Server has the same compatibility specifications as Version 1.2.0.
New features¶
Version 1.1.0 of the Splunk Add-on for Microsoft SQL Server has the following new features.
- Support for Splunk DB Connect v2 -Support for Microsoft SQL Server 2014
Fixed issues¶
Version 1.1.0 of the Splunk Add-on for Microsoft SQL Server fixes the following issues.
Known issues¶
Version 1.1.0 of the Splunk Add-on for Microsoft SQL Server has the following known issues.
Third-party software attributions¶
Version 1.1.0 of the Splunk Add-on for Microsoft SQL Server does not incorporate any third-party components or libraries.
Version 1.0.0¶
Compatibility¶
Version 1.0.0 of the Splunk Add-on for Microsoft SQL Server is compatible with the following software, CIM versions, and platforms.
| Category | Details |
|---|---|
| Splunk platform versions | 6.1 and later |
| CIM | 4.1 and later |
| Platforms | Windows |
| Vendor Products | Microsoft SQL Server versions 2008 R2 Enterprise and 2012 Enterprise |
New features¶
Version 1.0.0 of the Splunk Add-on for Microsoft SQL Server has the following new features.
- CIM-compliant data collection of performance metrics and security events from Microsoft SQL Server using log files, audit trace files, and Splunk DB Connect.
Known issues¶
Version 1.0.0 of the Splunk Add-on for Microsoft SQL Server has the following known issues.
Third-party software attributions¶
Version 1.0.0 of the Splunk Add-on for Microsoft SQL Server does not incorporate any third-party components or libraries.