Splunk Enterprise Security

Question RE: Enterprise Security Compatibility with Add-On for Microsoft Windows

richardphung
Communicator

We are planning an upgrade.
Our current environment:

  • Splunk Enterprise Core - 7.1.4
  • Enterprise Security - 5.1.1
  • Splunk Add-On for Microsoft Windows - 5.0.1
  • Splunk Add-On for Microsoft Active Directory - 1.0.0

Our target for this maintenance window is proposing to bring this to:

  • Splunk Enterprise Core - 7.3.3
  • Enterprise Security - 6.0.0

The question is do we need to also plan to upgrade the Splunk Add-On for Microsoft Windows from 5.0.1 to 6.x/7.x?
As well as deprecate Splunk Add-On for Microsoft Active Directory at the same time? or will these continue to work, and we can plan for a future deployment of the latest supported MS-Add-Ons?

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...