3.0.0

3.0.0 (2026-05-04)

⚠ BREAKING CHANGES

• Converted Splunk app to SDK

Features

• add universal api call make request action (23d4bda)
• sdkify splunk (71cd2ce)

Bug Fixes

• change action default due to different sdk param behaviour (09fe383)
• test issue (091b2cb)

2.20.3

2.20.3 (2025-11-26)

Bug Fixes

• linting and documentation (28b197c)
• Support specifying custom timestamp format for the 'run query' action (5b0f03a)

2.20.2

2.20.2 (2025-09-08)

Bug Fixes

• update dependencies for python 3.13 (06dacb8)

2.20.1

2.20.1 (2025-04-11)

Bug Fixes

• ci: Update Python dependencies for vulnerabilties, platform built-in removal, and Python 3.13 support. Update NOTICE file with updated dependencies. Apply pre-commit fixes. (5eb0301)

2.20.0

• Added 'use_event_id_sdi' parameter to asset config to allow updated event ingestion into the original container
• Added parameter in run query action to optionally remove the "_raw" field [PAPP-26864]

2.18.0

• Added 2 new fields ("disposition" and "integer_disposition") to "update event" action

2.17.0

• Added 'splunk_job_timeout' parameter to asset config [PAPP-34684]

2.16.2

• Fixed Django template, ifnotequal tag was deprecated.

2.16.1

• Changed logic in 'run query' action in order to decrease memory usage [PAPP-32609]

2.16.0

• Documentation update for steps to allow edit_tcp capability for a user [PAPP-31540]
• Bug fix for 'on poll' cef field names [PAPP-30430]
• Bug fix for accessing vault temp directory path [PAPP-32416]