Release notes for the Splunk Add-on for Unix and Linux

Version 10.3.0 of the Splunk Add-on for Unix and Linux was released .

Compatibility

Version 10.3.0 of the Splunk Add-on for Unix and Linux is compatible with the following software, CIM versions, and platforms:

Splunk platform versions	9.3.x, 9.4.x, 10.x
CIM	6.2.0
Supported OS for data collection	All supported Unix operating systems. See Unix operating systems.
Vendor products	All supported Unix operating systems. See Unix operating systems.

See the Scripted input reference for the Splunk Add-on for Unix and Linux page in the Reference chapter of this manual to learn more about scripted inputs and their operating system compatibility.

Note

The field alias functionality is compatible with the current version of this add-on. The current version of this add-on does not support older field alias configurations.

For more information about the field alias configuration change, refer to the Splunk Enterprise Release Notes.

New features

Version 10.3.0 of the Splunk Add-on for Unix and Linux has the following new features:

• Added SPL2 content for the lsof sourcetype

To learn more about SPL2, see What is SPL2?.

Updates to the SPL2 modules

This release contains the following changes to the SPL2 modules:

• Added a field-extraction module for the lsof sourcetype

Note

After you install or upgrade the Splunk Add-on for Unix and Linux, SPL2 modules can take a short time to appear in the product experience while they are compiled.

For more information on SPL2 modules for this release, see the Modules section. For a general introduction to SPL2, see What is SPL2?.

Fixed issues

Version 10.3.0 of the Splunk Add-on for Unix and Linux has the following known issues. If no issues appear here, no issues have yet been reported:

Known issues

Version 10.3.0 of the Splunk Add-on for Unix and Linux has the following known issues. If no issues appear here, no issues have yet been reported:

Third-party software attributions

The Splunk Add-on for Unix and Linux does not use third-party software or libraries.