CommonVault Splunk App

[sjain]

Hi,

We are in process of upgrading our splunk to v10. However by looks of it, common vault splunk base app is only supported till splunk 9.4

How do we ensure current data received by the app works in Splunk 10 too?

thanks

[inventsekar]

Hi @sjain 

may i know Splunk Version 10 would be on Splunk Enterprise? or Splunk Cloud?

if you "urgently" looking for CommonValut Splunk App in Splunk V10:

- get a Splunk V10 dev system, install the latest available CommonValut app, 

- run some testing, load some sample data, check dashboards, reports, alerts, everything

- confirm it and doublecheck everything before taking any decision about the production system

Lets say "not-urgent", lets say a month time for upgrading to Splunk V10:

- Contact the CommonValut dev guys

- explain the issue in detailed manner

- get their next update timeline and compare it with your timeline and take decision. 

If this post or any post addressed your question, could you pls:

• Give it karma to show appreciation 
• Mark it as the solution if it solved your issue 
• Add a comment if you’d like more details 

Acknowledging helpful answers will keep the community strong and motivates contributors to continue sharing their expertise, thanks. 

[PickleRick]

As a rule of thumb (testing is still the best way to confirm!):

- Addons which contain modular inputs or custom commands, alert actions and stuff like that can break with new Splunk versions since new versions sometimes introduce new python versions - the most significant change was quite a few years ago when Splunk started shipping Python 3 instead of Python 2 - a lot of things broke then and upgrades needed careful planing

- Addons which only contain sourcetype definitions, props, transforms, lookups... - they should usually work with no problems since this is the core part of Splunk functionality which tends to not change very often if at all

- Addons which additionally do some magic to make your data CIM-compliant may "stop working" at some point, meaning the data extracted/adjusted by those addons is no longer CIM-compliant but that is not directly related to Splunk version itself but rather to CIM app version and the version of CIM datamodels which come with it. (and apps themselves sometimes change CIM mappings from one version to another but that's another story).

[kknairr]

@sjain To ensure CommVault app continues to work in Splunk 10, you must validate it yourself using staging or dev tests. If issues arise, you can reach out to the app developer for an updated release. 

Ref: Commvault Splunk App | Splunkbase

Contact page for Commvault: Contact Us - Commvault

>>

If this post addressed your question, you can:

• Give it karma to show appreciation 👍
• Mark it as the solution if it solved your issue ✔️
• Add a comment if you’d like more details ✏️

Acknowledging helpful answers keeps the community strong and motivates contributors to continue sharing their expertise.

>>

[livehybrid]

Hi @sjain 

this is an app supported by CommVault so I would suggest contacting them at https://www.commvault.com/contact-us

🌟 Did this answer help you? If so, please consider:

• Adding karma to show it was useful

• Marking it as the solution if it resolved your issue

• Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing.

[isoutamo]

Please link your app here in splunk base or GitHub. It's much easier to help if we can be sure which app we are talking about!
Usually you should contact to App's developer and ask from him/her what is situation and are there any plans to update it.
If not then depending on app you can try to continue to use it, fix/modify it by yourself or find another app which fulfills your needs.