WSOC Version Support

[sdse78]

Can someone list all versions this app supports?

I am using 6.4.2 and it doesn't seem stable nor does it accept changes? Initially, after I installed it and went with default settings, it seemed to be ok. Once I started editing macros, things didn't seem stable.

Does Splunk need to be restarted after any change is made?

[nnmiller]

Based on the Windows Security Operations Center app page on Splunkbase, the last supported version is Splunk 5.0. There is an email address listed there to which you can report bugs.

If you restarted after installing and configuring the app, you shouldn't have to restart after editing macros. Try performing a debug refresh.

Chances are, give the age of the app, that some things may not be compatible with more recent versions of Splunk. Be sure to review your _internal index for WARN/ERROR log messages from the app.