3.0.12

New alerts:

• MonitoringConsole - one or more servers require configuration
• MonitoringConsole - one or more servers require configuration automated
• SearchHeadLevel - Peer timeouts or authentication issues

New macros:

• splunkadmins_macro_sub

New reports:

• SearchHeadLevel - Datamodel REST endpoint indexes in use
• SearchHeadLevel - Job performance data per indexer
• SearchHeadLevel - Jobs endpoint example
• SearchHeadLevel - configtracker index example

Updated alerts:

• AllSplunkEnterpriseLevel - Splunkd Log Messages Admins Only - more criteria
• SearchHeadLevel - Search Messages user level - more criteria
• SearchHeadLevel - Search Messages admins only - more criteria

Updated dashboards:

• splunk_forwarder_output_tuning - to reference NLB/load balanced version of asynchronous forwarding

Updated macros:

• whataccessdoihave - comments and added srchIndexesDisallowed

Updated reports:

• SearchHeadLevel - IndexesPerRole Remote Report - comment updates only
• SearchHeadLevel - Lookup file owners - comment updates only

Alerts added to future removal list:

• ClusterMasterLevel - Per index status

Updated to use splunkadmins_macro_sub macro:

• SearchHeadLevel - Dashboards with all time searches set
• SearchHeadLevel - Scheduled searches not specifying an index macro version
• SearchHeadLevel - Search Queries By Type Audit Logs macro version
• SearchHeadLevel - Search Queries By Type Audit Logs macro version other
• SearchHeadLevel - Search Queries summary exact match
• SearchHeadLevel - Search Queries summary non-exact match
• SearchHeadLevel - User - Dashboards searching all indexes macro version

Misc:

• Added supported themes settings in app.conf to allow the usage of dark theme (for 9.1 enterprise users and above)