# Changelog for Splunk Sink Connector for Confluent Platform
## Version 2.2.7
* Rejected non-HTTPS HEC endpoints by default in new connector configurations; disable via `splunk.hec.ssl.enforced=false` if needed.
* Fixed an issue where SSL options were ignored when creating a connector with Kerberos.
* Fixed a denial-of-service vulnerability caused by an unbounded retry loop.
* Upgraded `jackson-databind` from version 2.18.6 to 2.22.1.
* Added a timeout to timestamp regex matching.
## Version 2.2.6
* Upgraded plexus-utils from 3.0.24 to 4.0.3 to fix CVE
* Upgraded log4j-core from 2.25.3 to 2.25.4 to fix CVE
## Version 2.2.5
* Fixed security vulnerabilities in `org.apache.avro:avro`, `org.apache.logging.log4j:log4j-core` and `org.lz4:lz4-java`.
* Upgraded Jackson Core from 2.15.0 to 2.18.6
## Version 2.2.4
* Fixed CVEs
## Version 2.2.3
* Added support for parsing array in HEC formatted messages
## Version 2.2.2
* Fixed record tracker that did not support the concurrent removal of event batches
* Fixed wrong topic to index mapping in case of white spaces
## Version 2.2.1
* Disabled mandatory field validation if validation is disabled
* Recorded errors in configuration
* Fixed CVE-2023-3635 CVE-2024-25710 CVE-2024-26308
## Version 2.2.0
* Added auto-extract timestamp parameter support
* Fixed potential `NullPointerException` for Kafka headers with null value
* Fixed unit test cases and increase coverage
## Version 2.1.2
* Made queue capacity configurable.
* Added a `timestamp.timezone` configuration in `SplunkSinkConnectorConfig`.
* Updated dependencies to clear vulnerabilities.
## Version 2.1.1
* Fixed URI validator bug with the new configuration validation.
* Added a new configuration parameter for disabling splunk validations.
## Version 2.1.0
* Made truststore type configurable.
* Bumped `jackson-databind` from 2.12.6.1 to 2.12.7.1.
* Validated Splunk configuration before creating task.
* Bumped `protobuf-java` version to 3.21.7.
* Added support for record key extraction.