Release history for the Linux Iptables Add-on for Splunk¶

The latest version of the Pi-hole DNS app for Splunk is version 1.3.8. See Release notes for the Linux Iptables Add-on for Splunk of the latest version.

v1.3.7 Aug 20, 2021¶

fixed incorrect app value for UFW events - #5
updated regex for different UFW log formats - #8

v1.3.6 July 20, 2021¶

Notice

This updated simplifies the number of sourcetypes down to a single sourcetype (linux:iptables). Any existing reports/alerts/views that are utilizing the old sourcetypes ("linux:iptables:ufw" or "linux:iptables:firewalld") will be impacted. Verify before updating to this version.

added support for firewalld rich rules - #2
updated to only use the single sourcetype, 'linux:iptables'
updated action lookup to use wildcards

v1.3.5 Nov 2, 2020¶

Adding support for Splunk Cloud

Last update: January 23, 2023