# Changelog for Splunk Sink Connector for Confluent Platform ## Version 2.2.7 * Rejected non-HTTPS HEC endpoints by default in new connector configurations; disable via `splunk.hec.ssl.enforced=false` if needed. * Fixed an issue where SSL options were ignored when creating a connector with Kerberos. * Fixed a denial-of-service vulnerability caused by an unbounded retry loop. * Upgraded `jackson-databind` from version 2.18.6 to 2.22.1. * Added a timeout to timestamp regex matching. ## Version 2.2.6 * Upgraded plexus-utils from 3.0.24 to 4.0.3 to fix CVE * Upgraded log4j-core from 2.25.3 to 2.25.4 to fix CVE ## Version 2.2.5 * Fixed security vulnerabilities in `org.apache.avro:avro`, `org.apache.logging.log4j:log4j-core` and `org.lz4:lz4-java`. * Upgraded Jackson Core from 2.15.0 to 2.18.6 ## Version 2.2.4 * Fixed CVEs ## Version 2.2.3 * Added support for parsing array in HEC formatted messages ## Version 2.2.2 * Fixed record tracker that did not support the concurrent removal of event batches * Fixed wrong topic to index mapping in case of white spaces ## Version 2.2.1 * Disabled mandatory field validation if validation is disabled * Recorded errors in configuration * Fixed CVE-2023-3635 CVE-2024-25710 CVE-2024-26308 ## Version 2.2.0 * Added auto-extract timestamp parameter support * Fixed potential `NullPointerException` for Kafka headers with null value * Fixed unit test cases and increase coverage ## Version 2.1.2 * Made queue capacity configurable. * Added a `timestamp.timezone` configuration in `SplunkSinkConnectorConfig`. * Updated dependencies to clear vulnerabilities. ## Version 2.1.1 * Fixed URI validator bug with the new configuration validation. * Added a new configuration parameter for disabling splunk validations. ## Version 2.1.0 * Made truststore type configurable. * Bumped `jackson-databind` from 2.12.6.1 to 2.12.7.1. * Validated Splunk configuration before creating task. * Bumped `protobuf-java` version to 3.21.7. * Added support for record key extraction.