topic Re: Enterprise Security in Splunk 7.1 in Splunk Enterprise Security

Enterprise Security in Splunk 7.1

jowenssi — Wed, 25 Apr 2018 21:51:00 GMT

There appears to be issues with Splunk Enterprise on Splunk 7.1

Is there a reason that the Incident Review "Urgency" selection panel is not showing? [See Image Below]

I have tested this with clean installs of ES 4.7.4 and 5.0.

Re: Enterprise Security in Splunk 7.1

smoir_splunk — Thu, 26 Apr 2018 00:37:30 GMT

There is no version of Splunk Enterprise Security that is compatible with Splunk Enterprise or Splunk Cloud 7.1 at this time.

Re: Enterprise Security in Splunk 7.1

tommoore — Thu, 26 Apr 2018 17:11:23 GMT

Is there an ETA on when it's going to be compatible? I'm in the same boat on my production instance.

Re: Enterprise Security in Splunk 7.1

smoir_splunk — Thu, 26 Apr 2018 17:54:12 GMT

The next release will be compatible, but we can't publicly comment about timelines. You can trust that we know this is a pain point for customers to have a lag time like this, and are working to address that.

Re: Enterprise Security in Splunk 7.1

jowenssi — Thu, 26 Apr 2018 17:54:17 GMT

From the information I've been able to gather, we're waiting for the next ES release to include the updated UI components necessary for compatibility with 7.1.

Re: Enterprise Security in Splunk 7.1

itradeclayton — Fri, 27 Apr 2018 18:57:04 GMT

hopefully it doesn't take as long as it it did for the F5 add-on... 😕

Re: Enterprise Security in Splunk 7.1

tommoore — Tue, 29 Sep 2020 19:17:35 GMT

Thank you smoir for responding. Everything seems somewhat ok except for the incident_review_page.xml .. Browser console shows "Uncaught TypeError: i._btnClass is not a constructor"

If only I knew javascript 🙂

Re: Enterprise Security in Splunk 7.1

smoir_splunk — Fri, 27 Apr 2018 20:16:46 GMT

There is almost certainly other stuff going on behind the scenes, but incident review is always the most obvious one that is affected 🙂

Re: Enterprise Security in Splunk 7.1

aagudelos — Mon, 30 Apr 2018 18:52:17 GMT

Do you have a possible date for this update?

Re: Enterprise Security in Splunk 7.1

smoir_splunk — Mon, 30 Apr 2018 19:48:08 GMT

Nope, as I stated in the comments to my answer, the next release will be compatible, but we can't publicly comment about timelines. You can trust that we know this is a pain point for customers to have a lag time like this, and are working to address that.

Re: Enterprise Security in Splunk 7.1

jamesbrock — Wed, 02 May 2018 18:46:18 GMT

Interesting.

Shouldn't a .1 release be compatible with or have an accompanied upgrade for a flagship modules like ES 5.0.0 released not long ago?

just a thought ...

Re: Enterprise Security in Splunk 7.1

itradeclayton — Wed, 02 May 2018 19:05:43 GMT

imagine that!!! 🙂

Re: Enterprise Security in Splunk 7.1

jorgepinto1 — Mon, 07 May 2018 13:46:00 GMT

Wouldn't it be nice to put some sort of warning on the site or at the top of the release notes? Just wondering.

Re: Enterprise Security in Splunk 7.1

delink — Thu, 10 May 2018 15:47:00 GMT

Reading the release notes is an important part of any upgrade. 🙂

Re: Enterprise Security in Splunk 7.1

jowenssi — Mon, 14 May 2018 20:54:15 GMT

Splunk ES 5.1 was released and supports Splunk 7.1

"Splunk Web enhancements and version compatibility Splunk Web for Splunk 7.1.0 and Splunk Enterprise Security 5.1.0 provides an updated look and feel. As a result, these two releases of the Splunk platform and Splunk Enterprise Security are only supported with each other." - http://docs.splunk.com/Documentation/ES/5.1.0/RN/Enhancements

Re: Enterprise Security in Splunk 7.1

itradeclayton — Mon, 14 May 2018 20:58:05 GMT

need an update for ES 4.x... it will be a while before we upgrade to ES 5.

Re: Enterprise Security in Splunk 7.1

gjanders — Mon, 14 May 2018 22:32:58 GMT

Please update your answer to advise 7.1 is released when you have time.
Blog post here and release notes here

Re: Enterprise Security in Splunk 7.1

smoir_splunk — Tue, 15 May 2018 17:20:46 GMT

4.7.6 was the last update to ES 4.x

Re: Enterprise Security in Splunk 7.1

jowenssi — Mon, 11 Jun 2018 16:25:47 GMT

Splunk Enterprise Security 5.1 is compatible with Splunk 7.1.

Per the docs: Splunk Web for Splunk 7.1.0 and Splunk Enterprise Security 5.1.0 provides an updated look and feel. As a result, these two releases of the Splunk platform and Splunk Enterprise Security are only supported with each other.

http://docs.splunk.com/Documentation/ES/5.1.0/RN/Enhancements