DomainTools App for Splunk v4.4.1: Installation and enrichment improvements
Changed
- Indexer installation: Removed the need to separately install the app on indexers—installing on the search head automatically updates content on the indexers
Fixed
- Non-ASCII and uppercase domain enrichment: Resolved issue enriching domains containing non-ASCII and uppercase characters
- Threat Intel page threat map: Fixed issue where the threat map would not update based on the applied filter
- Monitoring Dashboard threat map link: Fixed the on-click link for the threat map on the Monitoring Dashboard
Documentation
Categories: Integrations, Splunk