Hi Mark,
We are currently on Splunk Enterprise version 7.0.3.1 and would be upgrading Domaintools TA from 1.4.1 to 3.0.42 version. As we see below note on splunkbase, we are reaching out to you to confirm if there are any outstanding challenges/issues that we need to take care while upgrading the TA.
"IMPORTANT: If you have a current installation of the DomainTools TA for Splunk, contact us first before applying the upgrade. We want to be sure the update is successful and that your custom queries know how to find all the great data we're adding with this new version."
Thanks in advance.
Hi - thanks for reaching out to us.
Since each upgrade situation can be unique, we encourage our existing customers to contact us directly, as I know you have already done, Priya. We're looking forward to helping you get this latest version running, and we'll continue that conversation with you over email or conference call.
For our other customers, you can always reach us through our enterprise support email address (which I'd prefer not to publish here in the open), or through your designated DomainTools account manager.