Hi Mark, We are currently on Splunk Enterprise version 7.0.3.1 and would be upgrading Domaintools TA from 1.4.1 to 3.0.42 version. As we see below note on splunkbase, we are reaching out to you to confirm if there are any outstanding challenges/issues that we need to take care while upgrading the TA. "IMPORTANT: If you have a current installation of the DomainTools TA for Splunk, contact us first before applying the upgrade. We want to be sure the update is successful and that your custom queries know how to find all the great data we're adding with this new version." Thanks in advance. ... View more