Aruba ClearPass App is not compatible with Splunk version 7.1.x Please let us know what will be the estimate time for releasing of compatible versions of these apps.
Has this app been tested for functionality with Splunk 7.2 yet? the App splunkbase page mentions compatibility only till 7.1
I've just had QA take a look at 7.x.
We've added 7.1 to the list of compatibility versions, 7.2 looks OK so far and I hope to get a thumbs-up early next week.
When going to v7.2.x+ from 7.1.x You will want to comment out the below fields, that is in the default/props.conf that will not show up as a field extraction.
This is the only anomaly so far that has come up after upgrading to v7.2.3 from v7.1.0
$splunk_homedir/splunk/etc/apps/ClearPassOnSplunk_2/default/props.conf
FIELDALIAS-cppm-24 = framed_ip_address AS ip_address
FIELDALIAS-cppm-016 = username as user_name
FIELDALIAS-cppm-acctnasip = nas_ip_address AS nas_ip
FIELDALIAS-cppm-019 = nad_ip AS nas_ip
FIELDALIAS-cppm-910 = host_mac AS mac_address
FIELDALIAS-cppm-911 = end_host_id AS mac_address
FIELDALIAS-cppm-911 = mac_address AS end_host_id