Hello Splunk Community!

We want to share an important update regarding the future of the Splunk Add-on Builder and what it means for Technology Add-on (TA) development and its users.

We are officially ending support for Splunk Add-on Builder on November 14th 2025. Existing add-ons will continue to run in supported environments. Please be informed that there will be no further updates, enhancements, or maintenance for the tool.

Python 3.9 is reaching end-of-life in October 2025, and Splunk SOAR is moving forward. Learn why updating your SOAR apps for Python 3.13 compatibility is essential, what steps you need to take, and where to find resources to ensure your apps remain secure and functional.

The upcoming releases of Splunk Enterprise 10.2.x and Splunk Cloud Platform 10.2.x will introduce support for the Python 3.13 interpreter. This update allows customers to run their Splunk apps and technology add-ons (TAs) on the latest Python version, providing an opportunity to modernize apps and leverage Python 3.13’s improvements.

The past few weeks have brought significant and exciting developments for the Splunk community! We've seen major advancements, exciting new features, and a wealth of knowledge shared. As we continue our "Strengthen Your Future" series, it’s the perfect time to reflect on some of the most impactful announcements and resources that are shaping the Splunk Platform.

Splunk developers, prepare for a game-changing update! The new Splunkbase App Listing Management public preview is here, streamlining your app submission experience. Enjoy powerful features like draft listings, a massive 2GB package limit, enhanced developer profiles, and a lightning-fast, automated AppInspect process that cuts review times from days to minutes. This is designed to supercharge innovation and ensure top-quality apps for all Splunk users.

The Splunk Developer Program is officially GA! Access centralized tools, licenses, support, and community recognition to build high-quality apps and extend Splunk’s capabilities. Learn more at dev.splunk.com.

In our first installment of this blog series, we introduced the exciting compliance and security enhancements coming to the next Splunk platform version, Splunk Enterprise 10.0 and Splunk Cloud Platform 10.0. Use this series as your go-to resource for key updates, benefits, and preparations for Splunk administrators and developers alike. Today, we continue the journey by diving into upgrade readiness and additional potentially breaking changes, equipping you with the insights you need for a seamless transition.

Ensure your Splunk apps are ready for the future! Splunk Enterprise 10 is here, don't let your users be left behind – upgrade your app today to work towards a seamless transition.

We’re excited to announce the launch of a foundational enhancement to Splunkbase: App Tiering.

Now you can filter apps by author type—Splunk, Cisco, Partners, or Community—making it faster to find trusted solutions that fit your needs.

We at Splunk are excited to kick off a new series of blogs dedicated to helping you understand the compliance landscape and new feature opportunities in the next platform upgrade for Splunk Enterprise and Splunk Cloud Platform. Each edition will provide essential updates for Splunk administrators and application developers, focusing on key benefits and modernizations. Think of this series as a one-stop-shop and look back on new announcements and required actions to prepare your environment and applications for the next upgrade. 

You asked, and we delivered! SPL just got easier with the latest release of the Splunk AI Assistant for SPL app 1.1.0, offering general availability of a new personalization feature. The AI Assistant now understands your environment, generating more accurate SPL from natural language prompts. Check out what’s new in v1.1.0 and learn how to get started today.

In March, the Splunk Threat Research Team had two releases of new security content via the Enterprise Security Content Update (ESCU) app. Check out this post for the full details!

Celebrate the beta launch of the Splunk Developer Program by joining the Splunk Build-a-thon! Explore the four exciting tracks: App Development, Add-on Integration, Data Management, and AI/ML. Build innovative solutions using Splunk’s developer tools and compete for prizes including .conf25 passes, Splunk EDU credits, and Cisco Store gift cards

Bringing you an awesome opportunity to take your data management and SPL2 skills to the next level! Join us for a 3-part technical workshop series happening from February-March. Harness the power of SPL2 to transform and route data with Edge Processor and Ingest Processor. Then, learn how to leverage SPL2 to build apps that extend the capabilities of the Splunk platform.

In January, the Splunk Threat Research Team had one release of new security content via the Splunk ES Content Update (ESCU) app. In addition to new security content, this release introduces ESCU 5.0, which delivers several new exciting enhancements designed to help further security operations. Check out this post for more details!

At .conf24, we shared that we were in the process of integrating Cisco Talos threat intelligence into Splunk Enterprise Security, Splunk SOAR, and Splunk Attack Analyzer. We know just how eager the community has been to see these integrations come to fruition, so we’re thrilled to share that all of the integrations are live for Splunk Security (cloud) customers.

This blog post aims to give Splunk customers (both Splunk Enterprise and Splunk Cloud) a heads-up about the actions they’ll need to take to prepare for upgrading to a Splunk version(coming soon) that will upgrade its core cryptographic library from OpenSSL 1.0.2 to OpenSSL 3. Splunk may additionally produce an Upgrade Readiness experience that will assist customers in identifying specific action items they need to take, but we don’t want to wait for such tooling to become available to start taking action.

In December, the Splunk Threat Research Team had one release of new security content via the Enterprise Security Content Update (ESCU) app. Check out this post for the full details!

In November, the Splunk Threat Research Team had one release of new security content via the Enterprise Security Content Update (ESCU) app. Check out this post for the full details!

In October, the Splunk Threat Research Team had one release of new security content via the Enterprise Security Content Update (ESCU) app. Check out this post for the full details!

In September, the Splunk Threat Research Team had 2 releases of new security content via the Enterprise Security Content Update (ESCU) app. Check out this post for the full details!

In July, the Splunk Threat Research Team had three releases of new security content via the Enterprise Security Content Update (ESCU) app. Read on for the details!

In June, the Splunk Threat Research Team had two releases of new security content via the Enterprise Security Content Update (ESCU) app. Read on for the details!

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise Security Content Update (ESCU) app. Read on for the details!

We’re happy to share the release of Splunk App for PCI Compliance 5.3.1!

We’re happy to share the release of Splunk Security Essentials 3.8.0, which includes new and updated capabilities to help organizations mature their security programs even faster.

Last month, the Splunk Threat Research Team had 2 releases of new security content via the Enterprise Security Content Update (ESCU) app. Read on for the details!

The Splunk Dashboard Examples App for SimpleXML will reach end of life on Dec 19, 2024.