Skip to content
DomainTools Technical Documentation

DomainTools App for Splunk v5.6.1 through v5.6.3

← All updates ·

Added

  • Splunk Cloud 10.x support, including Cloud 10.2 with Enterprise Security (v5.6.1): The app runs on Python 3.13 and is supported on Splunk Cloud Platform 10.x, including Cloud 10.2 running Enterprise Security (ES).

Changed

  • Offline public suffix list (v5.6.2): The app ships with a bundled public suffix list and no longer downloads an updated list at runtime. Environments that restrict outbound connections no longer break on domain extraction. You can update the bundled list manually if needed.
  • Iris Investigate (API only) SKU support (v5.6.2): The Test Connection and Iris Investigate dashboards now recognize the Iris Investigate (API only) SKU, so accounts on that entitlement no longer see incorrect “no access” messages for Domain Profile and pivoting features.

Fixed

  • Iris Detect imports on large ignore lists (v5.6.3): Scheduled Iris Detect result imports no longer hang or exceed the hourly rate limit for accounts with large numbers of ignored domains. The import now fetches only recently changed ignored domains rather than the full history.

Documentation

Categories: Integrations, Splunk