Release history for the Splunk Add-on for Tomcat¶
Latest release¶
The most recent versions of the Splunk Add-on for Tomcat is version 3.3.1. See Release notes for the Splunk Add-on for Tomcat for the release notes of this latest version.
Version 3.2.0¶
Version 3.2.0 of the Splunk Add-on for Tomcat was released on September 6, 2024.
Compatibility¶
Version 3.2.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 9.0.x, 9.1.x, 9.2.x, 9.3.x |
| CIM | 5.0.1 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23 |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
-
Support for IPv6. Splunk Add-on for Tomcat version 3.2.0 is now compatible with the Splunk platform running on the IPv6 environment.
-
Fixed the security vulnerabilities found in the certifi, idna, and urllib3 libraries by upgrading its version from 2023.11.17 to 2024.7.4, 3.2 to 3.7, and 1.26.18 to 1.26.19.
Fixed issues¶
Version 3.2.0 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues¶
Version 3.2.0 of the Splunk Add-on for Tomcat has the following known issues.
Version 3.1.4¶
Version 3.1.4 of the Splunk Add-on for Tomcat was released on December 12, 2023.
Compatibility¶
Version 3.1.4 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 9.0.x, 9.1.x |
| CIM | 5.0.1 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23 |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
- Fixed the security vulnerabilities found in the certifi, requests, and urllib3 libraries by upgrading its version from 2022.12.7 to 2023.11.17, 2.26.0 to 2.31.0, and 1.26.6 to 1.26.18.
Fixed issues¶
Version 3.1.4 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues¶
Version 3.1.4 of the Splunk Add-on for Tomcat has the following known issues.
Version 3.1.3¶
Version 3.1.3 of the Splunk Add-on for Tomcat was released on February 22, 2023.
Compatibility¶
Version 3.1.3 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 8.1.x, 8.2.x, 9.0.x |
| CIM | 5.0.1 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23 |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
-
Upgraded the third-party certifi library to version 2022.12.7
-
Fixed a security vulnerability found in the certifi library.
Fixed issues¶
Version 3.1.3 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues¶
Version 3.1.3 of the Splunk Add-on for Tomcat has the following known issues.
Version 3.1.2¶
Version 3.1.2 of the Splunk Add-on for Tomcat was released on Nov 7, 2022.
Compatibility¶
Version 3.1.2 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 8.1.x, 8.2.x, 9.0.x |
| CIM | 5.0.1 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23 |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
- Fixed a security vulnerability found in the commons-text library by upgrading its version from 1.9.0 to 1.10.0
Fixed issues¶
Version 3.1.2 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues¶
Version 3.1.2 of the Splunk Add-on for Tomcat has the following known issues.
Version 3.1.1¶
Version 3.1.1 of the Splunk Add-on for Tomcat was released on Sept 20, 2022.
Compatibility¶
Version 3.1.1 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 8.1.x, 8.2.x, 9.0.x |
| CIM | 5.0.1 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, 10.0.12, and 10.0.23 |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
-
Support for Tomcat server version 10.0.23
-
CIM compatibility with version 5.0.1
-
Fixed multiple security vulnerabilities found in the fastjson, commons-configuration2 and log4j libraries:
-
Upgraded the fastjsonlog4j library from version 1.2.78 to 1.2.83
-
Upgraded the log4j library from version 2.16.0 to 2.18.0
-
Upgraded the commons-configuration2 library from version 2.7 to 2.8.0
Fixed issues¶
Version 3.1.1 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues¶
Version 3.1.1 of the Splunk Add-on for Tomcat has the following known issues.
Version 3.0.2¶
Note
The log4j library used in the Splunk Add-on for Tomcat was updated to version 2.16 in December 2021. Since then log4j has released version 2.17.1 which addresses additional vulnerabilities. These vulnerabilities are rated as moderate severity and the add-on does not use the affected code path. However, this add-on will be updated to the recommended version of 2.17.1 in an upcoming release.
Version 3.0.2 of the Splunk Add-on for Tomcat was released on Dec 17, 2022.
Compatibility¶
Version 3.0.2 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 8/0x, 8.1.x, 8.2.x |
| CIM | 4.20 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12 |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
-
Upgraded the fastjson library from version 1.2.78 to 1.2.83.
-
Upgraded the log4j library from version 2.16.0 to 2.18.0.
-
Fixed a security vulnerability found in the fastjson and log4j library.
Fixed issues¶
Version 3.0.2 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues¶
Version 3.0.2 of the Splunk Add-on for Tomcat has the following known issues.
Version 3.0.2¶
Note
The log4j library used in the Splunk Add-on for Tomcat was updated to version 2.16 in December 2021. Since then log4j has released version 2.17.1 which addresses additional vulnerabilities. These vulnerabilities are rated as moderate severity and the add-on does not use the affected code path. However, this add-on will be updated to the recommended version of 2.17.1 in an upcoming release.
Version 3.0.2 of the Splunk Add-on for Tomcat was released on December 17, 2021.
Compatibility¶
Version 3.0.2 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 8.0.x, 8.1.x, 8.2.x |
| CIM | 4.20 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12 |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
-
Upgraded the log4j library from version 2.15.0 to 2.16.0.
-
Fixed a security vulnerability found in the log4j library
Fixed issues¶
Version 3.0.2 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues¶
Version 3.0.2 of the Splunk Add-on for Tomcat has the following known issues.
Version 3.0.1¶
Version 3.0.1 of the Splunk Add-on for Tomcat was released on December 14, 2021.
Compatibility¶
Version 3.0.1 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 8.0.x, 8.1.x, 8.2.x |
| CIM | 4.20.0 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12 |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
Fixed a security vulnerability found in the log4j library.
Fixed issues¶
Version 3.0.1 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues¶
Version 3.0.1 of the Splunk Add-on for Tomcat has the following known issues.
Version 3.0.0¶
Version 3.0.0 of the Splunk Add-on for Tomcat was released on October 28, 2021.
Compatibility¶
Version 3.0.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 8.0.x, 8.1.x, 8.2.x |
| CIM | 4.20.0 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61, 9.0.41, and 10.0.12 |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
Version 3.0.0 of the Splunk Add-on for Tomcat has the following new features.
-
Migrated the TA from setup page to a fast and intuitive UI with an improved look and feel.
-
Support of the Tomcat server version 10.0.12.
-
Support of multiple accounts and multiple inputs.
-
Removed python2 support. Splunk only supports python3 for future releases.
-
Provided server validation while configuring the account on the configuration page.
-
Compatibility with CIM version 4.20.
Field changes¶
The following sections contain information on fields and data models that have been added, modified, or removed in this release.
Fields added and removed¶
No fields have been added or removed between Tomcat v2.1.0 and Tomcat v3.0.0.
Fields modified¶
| Sourcetype | CIM Field | Operation | Vendor Field Before | Vendor field after | Sample value before | Sample value after |
|---|---|---|---|---|---|---|
tomcat:access:log:splunk |
category | \<add> | category | category | 78 | image/gif |
tomcat:access:log:splunk |
url_domain | \<add> | url_domain | url_domain | ec2.splunkit.io | i-test-instance.ec2.splunkit.io |
tomcat:access:log:splunk |
http_referrer_domain | \<add> | http_referrer_domain | http_referrer_domain | ec2.splunkit.io | i-test-instance.ec2.splunkit.io |
CIM changes¶
There is no CIM addition, modification, or removal between Tomcat v2.1.0 and Tomcat v3.0.0.
Fixed issues¶
Version 3.0.0 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues¶
Version 3.0.0 of the Splunk Add-on for Tomcat has the following known issues.
Version 2.1.0¶
Version 2.1.0 of the Splunk Add-on for Tomcat was released on February 4, 2021. Version 2.1.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 7.2.x, 7.3.x, 8.0.x, 8.1.x |
| CIM | 4.18 |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.0, 8.5.61 and 9.0.41 |
Note
The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.
For more information about the field alias configuration change, see the Splunk Enterprise Release Notes.
New features¶
Version 2.1.0 of the Splunk Add-on for Tomcat has the following new features.
-
Support for Apache Tomcat server latest version 9.0.41.
-
Added the new
tomcat:access:log:splunksourcetype to fully comply with the Web CIM model. Provided guidance on configuring Tomcat logging for this new sourcetype. -
Compatibility with the OpenJDK 11 and OracleJDK 11.
-
Compatibility with the Common Information Model (CIM) version 4.18.
-
Enhanced UX through instant validations for the fields that are required on the setup page.
Fixed issues¶
Version 2.1.0 of the Splunk Add-on for Tomcat has the following fixed issues.
Known issues¶
Version 2.1.0 of the Splunk Add-on for Tomcat has the following known issues.
Version 2.0.1¶
Version 2.0.1 of the Splunk Add-on for Tomcat was released on March 1, 2019. Version 2.0.1 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 7.0.x, 7.1.x, 7.2.x, 8.0.x |
| CIM | 4.13 or later |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.x or later |
New features¶
Version 2.0.1 of the Splunk Add-on for Tomcat has the following new features.
- Default support for Python 3
Fixed issues¶
Version 2.0.1 of the Splunk Add-on for Tomcat has no fixed issues.
Known issues¶
Version 2.0.1 of the Splunk Add-on for Tomcat has the following known issues.
Version 2.0.0¶
Version 2.0.0 of the Splunk Add-on for Tomcat was released on October 21, 2019. Version 2.0.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 7.0.x, 7.1.x, 7.2.x, 8.0.x |
| CIM | 4.13 or later |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.x or later |
New features¶
Version 2.0.0 of the Splunk Add-on for Tomcat has the following new features.
- Support for Python 3
Fixed issues¶
Version 2.0.0 of the Splunk Add-on for Tomcat has no fixed issues.
Known issues¶
Version 2.0.0 of the Splunk Add-on for Tomcat has the following known issues.
Version 1.1.0¶
Version 1.1.0 of the Splunk Add-on for Tomcat was released on April 1, 2016. Version 1.1.0 of the Splunk Add-on for Tomcat is compatible with the following software, CIM versions, and platforms.
| Component | Description |
|---|---|
| Splunk software versions | 6.5.x, 6.6.x, 7.0.x, 7.1.x, 7.2.x |
| CIM | 4.2 or later |
| Platforms | Windows and Linux |
| Vendor Products | Apache Tomcat 8.x or later |
New features¶
Version 1.1.0 of the Splunk Add-on for Tomcat has the following new features.
- ITSI AppServer module integration: modify the Splunk Add-on for Tomcat to collect the necessary data for populating the inventory and recommended KPIs for ITSI AppServer module.
- Add the following new JMX templates to support mapping to the AppServer ITSI module: tomcat_connector, tomcat_global_request_processor, tomcat_webapp_class_loader, tomcat_manager.
- Add theTomcat version number and Tomcat application server saved searches.
- Add extraction and mapping for two additional fields:
thread_idandthread_state.
Fixed issues¶
Version 1.1.0 of the Splunk Add-on for Tomcat has no fixed issues.
Known issues¶
Version 1.1.0 of the Splunk Add-on for Tomcat has the following known issues.
Version 1.0.0¶
Version 1.0.0 of the Splunk Add-on for Tomcat has the same compatibility specifications as version 1.1.0.
New features¶
Version 1.0.0 of the Splunk Add-on for Tomcat had the following new feature.
- Created a new add-on for Apache Tomcat java server.
Known issues¶
Version 1.0.0 of the Splunk Add-on for Tomcat had the following known issues.