Changelog for Splunk Sink Connector for Confluent Platform

Version 2.2.7

• Rejected non-HTTPS HEC endpoints by default in new connector configurations; disable via splunk.hec.ssl.enforced=false if needed.

• Fixed an issue where SSL options were ignored when creating a connector with Kerberos.

• Fixed a denial-of-service vulnerability caused by an unbounded retry loop.

• Upgraded jackson-databind from version 2.18.6 to 2.22.1.

• Added a timeout to timestamp regex matching.

Version 2.2.6

• Upgraded plexus-utils from 3.0.24 to 4.0.3 to fix CVE

• Upgraded log4j-core from 2.25.3 to 2.25.4 to fix CVE

Version 2.2.5

• Fixed security vulnerabilities in org.apache.avro:avro, org.apache.logging.log4j:log4j-core and org.lz4:lz4-java.

• Upgraded Jackson Core from 2.15.0 to 2.18.6

Version 2.2.4

• Fixed CVEs

Version 2.2.3

• Added support for parsing array in HEC formatted messages

Version 2.2.2

• Fixed record tracker that did not support the concurrent removal of event batches

• Fixed wrong topic to index mapping in case of white spaces

Version 2.2.1

• Disabled mandatory field validation if validation is disabled

• Recorded errors in configuration

• Fixed CVE-2023-3635 CVE-2024-25710 CVE-2024-26308

Version 2.2.0

• Added auto-extract timestamp parameter support

• Fixed potential NullPointerException for Kafka headers with null value

• Fixed unit test cases and increase coverage

Version 2.1.2

• Made queue capacity configurable.

• Added a timestamp.timezone configuration in SplunkSinkConnectorConfig.

• Updated dependencies to clear vulnerabilities.

Version 2.1.1

• Fixed URI validator bug with the new configuration validation.

• Added a new configuration parameter for disabling splunk validations.

Version 2.1.0

• Made truststore type configurable.

• Bumped jackson-databind from 2.12.6.1 to 2.12.7.1.

• Validated Splunk configuration before creating task.

• Bumped protobuf-java version to 3.21.7.

• Added support for record key extraction.