The Layer8Insight Indexer App for Splunk has been updated to version 1.4 and is posted on Splunkbase. This version includes a change to a stanza name in transforms.conf and updates the licensing details. There is no need to update if you are already running a 1.3.x version of the app. The changes do not affect the the pre-processing of the Layer8Insight data before it is indexed.
The Layer8Insight App for Splunk has not been updated since its last release, version 2.0.
Layer8Insight Indexer App for Splunk, version 1.4
- Fixed name of transform stanza for overwriting the "host" field in JSON events
- Affects both props.conf and transforms.conf
- Only changed the name of the stanza, not the operation performed
- Updated documentation and licensing