Release history for the Pi-hole Addon for Splunk¶

The latest version of the Pi-hole Addon for Splunk is version 1.3.4. See Release notes for the Pi-hole Add on for Splunk of the latest version.

v1.3.3 August 24, 2023¶

Updated¶

• Fixed issue with Api Port in modular input - #56
• Updated Splunklib

v1.3.2 July 20, 2022¶

New¶

• Added dest field to map to CIM.
• Added dest_port field to forwarded events.
• Added new special domain block field extractions (see Pi-hole pull request for more info: https://github.com/pi-hole/FTL/pull/1338).
• Added query_type field.

Updated¶

• Updated to new AOB version.
• Updated pihole eventtype.

Removed¶

• Removed pihole_lists script
• Removed special characters from reply_code field.

v1.3.1 July 8, 2021¶

• updated field extractions to include dnssec query events introduced in new Pi-Hole version (Core: v5.4, FTL v5.9).
• fixed issue causing internal logs to produce a checkpointer not defined error #28

v1.3.0 April 28, 2021¶

• Added ability to pull regex and domain filters created in the Pi-hole server.
• Updated the Modular input to make more flexible.
• With the upcoming version of Pi-hole® 6.0, the scripted input "pihole_lists.sh" will be deprecated. This information will be available through the REST API in the upcoming release.

v1.2.8 Feb 20, 2021¶

• Added scripted input to ingest lists which enable the mapping of blocked queries to originating blocklists -> #21

v1.2.7 Dec 21, 2020¶

• Added Modular Input for pulling select data from the HTTP API.

v1.2.6 Oct 18, 2020¶

• Fixed Regex/Exact query blacklist events not being extracted -> Issue #9
• Fixed HTTPS record types fixed (type=65) -> Issue #10

v1.2.5 Sept 1, 2020¶

• Added compatibility for DHCP events.
• New sourcetype: pihole:dhcp.