Skip to content
DomainTools Technical Documentation

DomainTools App for Splunk v4.4: General availability with React rebuild

← All updates ·

Added

  • Inline Passive DNS lookup: Added dtdnsdbenrich command for inline Passive DNS lookups
  • inline_results option: Added inline_results option to dtirisenrich to preserve previous fields if desired

Changed

  • React and SimpleXML rebuild: All pages rebuilt using SimpleXML and React, resolving HTML dashboard warnings and removing dependencies on older jQuery versions
  • Iris Detect page separation: Iris Detect page separated into two pages—an Iris Detect Dashboard and an Iris Detect Monitored Term setup page

Deprecated

  • PhishEye support: Removed support for PhishEye (replaced by Iris Detect)

Removed

  • KV store replication to indexers: Removed KV store replication to indexers

Fixed

  • Iris Detect domain import: Resolved issue that would cause Iris Detect domains to be imported into Splunk regardless of whether a monitored term was enabled
  • Splunk 9 domain import: Resolved issue on Splunk 9 where Iris Detect domains would not be imported at all
  • Domain parsing errors: Domains with parsing issues are now logged (if Diagnostic Panel is enabled) and skipped, resolving queue builder errors in some environments
  • In-app documentation: Improved in-app documentation and syntax highlighting on custom search commands

Documentation

Categories: Integrations, Splunk