Available App Updates

[github-actions]

Supported TA version updates:

TA Name	Current Version	Updated Version	Release Published Time
Cisco Secure Access Add-on for Splunk	1.0.50	1.0.53	July 20, 2026 17:52 UTC
Cisco Security Cloud	3.6.5	3.6.8	July 28, 2026 13:57 UTC
Palo Alto Networks Add-on	3.1.0	3.2.2	July 29, 2026 16:21 UTC
Splunk Add-on for AWS	8.1.2	8.2.1	July 30, 2026 10:30 UTC
Splunk Add-on for CrowdStrike FDR	2.0.5	3.1.2	July 30, 2026 10:33 UTC
Splunk Add-on for Github	3.2.0	3.3.1	June 24, 2026 06:17 UTC
Splunk Add-on for Google Workspace	3.1.1	4.0.0	May 27, 2026 12:29 UTC
Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1	July 28, 2026 14:08 UTC
Splunk Add-on for Microsoft Security	3.0.0	4.0.0	July 21, 2026 09:21 UTC
Splunk Add-on for Okta Identity Cloud	5.0.2	5.1.0	July 30, 2026 12:00 UTC
Splunk Add-on for Sysmon	5.0.0	5.0.1	July 6, 2026 07:23 UTC
Splunk Add-on for Unix and Linux	10.2.0	10.3.2	July 30, 2026 15:39 UTC
TA for Zeek	1.0.10	1.0.11	August 21, 2025 16:38 UTC

Supported TAs already current:

TA Name	Current Version
Add-on for VMware ESXi Logs	4.2.2
App for CircleCI	0.1.1
CCX Add-on for Suricata	1.0.1
Cisco Networks Add-on	2.7.9
Cisco NVM Add-on for Splunk	4.0.7
MCP TA	0.1.2
Splunk add on for Microsoft Defender Advanced Hunting	1.4.2
Splunk Add-on for AppDynamics	3.2.1
Splunk Add-on for Microsoft Office 365	6.0.2
Splunk Add-on for Microsoft Windows	10.0.1
Splunk Add-on for NGINX	3.3.0
Splunk Add-on for Stream Wire Data	8.1.6
Splunk Add-on for Sysmon for Linux	1.0.0
Splunk Common Information Model (CIM)	8.5.0
Splunk Microsoft Office 365 Add-on	6.0.2
TA for Zeek	1.0.11
TA-ollama	0.1.5
TA-osquery	1.0.4

Data source files updated:

File	TA Name	Previous Version	Updated Version
data_sources/cisco_secure_access_dns.yml	Cisco Secure Access Add-on for Splunk	1.0.50	1.0.53
data_sources/cisco_secure_access_firewall.yml	Cisco Secure Access Add-on for Splunk	1.0.50	1.0.53
data_sources/cisco_secure_access_proxy.yml	Cisco Secure Access Add-on for Splunk	1.0.50	1.0.53
data_sources/cisco_ai_defense_alerts.yml	Cisco Security Cloud	3.6.5	3.6.8
data_sources/cisco_asa_logs.yml	Cisco Security Cloud	3.6.5	3.6.8
data_sources/cisco_duo_activity.yml	Cisco Security Cloud	3.6.5	3.6.8
data_sources/cisco_duo_administrator.yml	Cisco Security Cloud	3.6.5	3.6.8
data_sources/cisco_isovalent_process_connect.yml	Cisco Security Cloud	3.6.5	3.6.8
data_sources/cisco_isovalent_process_exec.yml	Cisco Security Cloud	3.6.5	3.6.8
data_sources/cisco_isovalent_process_kprobe.yml	Cisco Security Cloud	3.6.5	3.6.8
data_sources/cisco_secure_firewall_threat_defense_connection_event.yml	Cisco Security Cloud	3.6.5	3.6.8
data_sources/cisco_secure_firewall_threat_defense_file_event.yml	Cisco Security Cloud	3.6.5	3.6.8
data_sources/cisco_secure_firewall_threat_defense_intrusion_event.yml	Cisco Security Cloud	3.6.5	3.6.8
data_sources/palo_alto_network_threat.yml	Palo Alto Networks Add-on	3.1.0	3.2.2
data_sources/palo_alto_network_traffic.yml	Palo Alto Networks Add-on	3.1.0	3.2.2
data_sources/asl_aws_cloudtrail.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudfront.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_assumerolewithsaml.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_consolelogin.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_copyobject.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_createaccesskey.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_createkey.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_createloginprofile.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_createnetworkaclentry.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_createpolicyversion.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_createsnapshot.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_createtask.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_createvirtualmfadevice.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deactivatemfadevice.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deleteaccountpasswordpolicy.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletealarms.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletedetector.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletegroup.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deleteguardrail.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deleteipset.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deleteknowledgebase.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deleteloggingconfiguration.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deleteloggroup.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletelogstream.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletemodelinvocationloggingconfiguration.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletenetworkaclentry.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletepolicy.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deleterule.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deleterulegroup.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletesnapshot.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletetrail.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletevirtualmfadevice.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_deletewebacl.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_describeeventaggregates.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_describeimagescanfindings.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_describesnapshotattribute.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_getaccountpasswordpolicy.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_getobject.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_getpassworddata.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_invokemodel.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_jobcreated.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_listfoundationmodels.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_modifydbinstance.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_modifyimageattribute.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_modifysnapshotattribute.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_putbucketacl.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_putbucketlifecycle.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_putbucketreplication.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_putbucketversioning.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_putimage.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_putkeypolicy.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_replacenetworkaclentry.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_setdefaultpolicyversion.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_stoplogging.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_updateaccountpasswordpolicy.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_updateloginprofile.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_updatesamlprovider.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudtrail_updatetrail.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_cloudwatchlogs_vpcflow.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/aws_security_hub.yml	Splunk Add-on for AWS	8.1.2	8.2.1
data_sources/crowdstrike_falcon_stream_alert.yml	Splunk Add-on for CrowdStrike FDR	2.0.5	3.1.2
data_sources/crowdstrike_processrollup2.yml	Splunk Add-on for CrowdStrike FDR	2.0.5	3.1.2
data_sources/github_enterprise_audit_logs.yml	Splunk Add-on for Github	3.2.0	3.3.1
data_sources/github_organizations_audit_logs.yml	Splunk Add-on for Github	3.2.0	3.3.1
data_sources/g_suite_drive.yml	Splunk Add-on for Google Workspace	3.1.1	4.0.0
data_sources/g_suite_gmail.yml	Splunk Add-on for Google Workspace	3.1.1	4.0.0
data_sources/google_workspace.yml	Splunk Add-on for Google Workspace	3.1.1	4.0.0
data_sources/google_workspace_login_failure.yml	Splunk Add-on for Google Workspace	3.1.1	4.0.0
data_sources/google_workspace_login_success.yml	Splunk Add-on for Google Workspace	3.1.1	4.0.0
data_sources/azure_active_directory.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_add_app_role_assignment_to_service_principal.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_add_member_to_role.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_add_owner_to_application.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_add_service_principal.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_add_unverified_domain.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_consent_to_application.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_disable_strong_authentication.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_enable_account.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_invite_external_user.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_microsoftgraphactivitylogs.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_noninteractiveusersigninlogs.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_reset_password_(by_admin).yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_set_domain_authentication.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_sign_in_activity.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_update_application.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_update_authorization_policy.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_update_user.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_active_directory_user_registered_security_info.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_audit_create_or_update_an_azure_automation_account.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_audit_create_or_update_an_azure_automation_runbook.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_audit_create_or_update_an_azure_automation_webhook.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/azure_monitor_activity.yml	Splunk Add-on for Microsoft Cloud Services	6.1.3	6.3.1
data_sources/ms365_defender_incident_alerts.yml	Splunk Add-on for Microsoft Security	3.0.0	4.0.0
data_sources/ms_defender_atp_alerts.yml	Splunk Add-on for Microsoft Security	3.0.0	4.0.0
data_sources/okta.yml	Splunk Add-on for Okta Identity Cloud	5.0.2	5.1.0
data_sources/sysmon_eventid_1.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_10.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_11.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_12.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_13.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_14.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_15.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_17.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_18.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_20.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_21.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_22.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_23.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_26.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_29.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_3.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_5.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_6.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_7.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_8.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/sysmon_eventid_9.yml	Splunk Add-on for Sysmon	5.0.0	5.0.1
data_sources/linux_auditd_add_user.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_auditd_cwd.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_auditd_daemon_abort.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_auditd_daemon_end.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_auditd_daemon_start.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_auditd_execve.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_auditd_path.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_auditd_proctitle.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_auditd_service_stop.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_auditd_syscall.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_messages_syslog.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/linux_secure.yml	Splunk Add-on for Unix and Linux	10.2.0	10.3.2
data_sources/zeek_conn.yml	TA for Zeek	1.0.10	1.0.11