All Apps and Add-ons

Is there a list of what enhancements have been made to the Splunk Add-on for Symantec Endpoint Protection 2.0.1 over the old version of the add-on?

andrewbohman
Explorer

I am running an old version of the add-on and have just recently gotten it working. What advantage would I get from upgrading to the new add-on? Does it collect more data or data from more sources? I think I will work towards upgrading if that will improve the ability to fit the Sep logs to the CIM.

0 Karma

rpille_splunk
Splunk Employee
Splunk Employee

Yes, you should definitely upgrade.

If you are currently using version 2.0.0, see the release notes for the important issue that we fixed that affects that release:
http://docs.splunk.com/Documentation/AddOns/latest/SymantecEP/Releasenotes

If you are currently using TA-sep and TA-sav, packaged in Enterprise Security, read the documentation for full description of how the newly supported add-on now maps to the CIM: http://docs.splunk.com/Documentation/AddOns/latest/SymantecEP/Sourcetypes

Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...