Updates to InfoSec App for Splunk?

[amartin6]

We are looking at utilizing the "InfoSec App for Splunk" however the last version is from June of 2021 (two years ago).  Has this app been superseded by another or is there a different long term plan for the app?  Just wanting to know if we should continue down this path or another path.

Thanks!

[gcusello]

Hi @amartin6,

the last version of this app is 1.7.0 and was release at June, 29 2021.

When a new version will be released, you will find it in its Splunkbase page https://splunkbase.splunk.com/app/4240

It's a Splunk supported app, so probably a new release will be released but for my knowledge there isn't any roadmap.

You could add this request to Splunk Ideas (ideas.splunk.com).

Waiting for the new release, at the same time, you could modify the parts that aren't still updated to you new situation.

Ciao.

Giuseppe

[isoutamo]

Hi

this app is one of Splunk’s security apps it’s targeted to entry level. The next one is Splunk Security Essential and the best/most powerful is ES (enterprise security). Obviously Splunk is using most of it’s resources to the last one, but I suppose that those other two are still suitable for their segments. 
r. Ismo