v1.1.7

[1.1.7] - 2026-05-28

Changed

• Export-SplunkData & Update-SplunkLookup:
  • Updated Splunk REST search job creation to use the shared app namespace (servicesNS/nobody/) instead of the authenticated user namespace. This avoids severe latency caused by user-specific namespace resolution while preserving app-context search behavior.

v1.1.6

[1.1.6] - 2026-03-04

Changed

• Export-SplunkData: File generation in transient execution environments (e.g. Azure Automation runbooks) is susceptible to intermittent I/O failures. Added retry logic to handle cases where output files are not written due to short-lived environment instability.

v1.1.5

Changed

• Removed a previous v1.1.1 fix in Send-SplunkHECEvent.ps1 to address a case where Splunk was treating unicode quotation characters as U+0022. PowerShell escapes U+0022 with ConvertTo-Json. This change removes the escapes of the unicode quote characters since this now causes an error. Splunk must have resolved this bug and therefore the pervious fix was preventing some events from being accepted by the HEC endpoint.
• Update GitHub actions for checkout and pr-reviews-reminder-action workflows.
• README.md - update the end of support to November 2026 to align with PowerShell 7.4

v1.1.4

[1.1.4] - 2024-11-06

Changed

• Export-SplunkData.ps1: Added new parameters "Offset" and "MaxResults" to add the functionality of offsetting results due to the 50000 event limit within the Splunk Cloud API.

v1.1.3

[1.1.3] - 2023-05-01

Changed

• Send-SplunkHECEvent.ps1 now has a parameter SkipCertificateCheck to allow for connections to dev environments with self-signed certificates on the HEC endpoint.

v1.1.2

[1.1.2] - 2023-03-31

Changed

• Added "count" parameter and set to 0 so results are no longer limited to 100.

v1.1.1

[1.1.1] - 2022-09-06

Changed

• Provided a fix in Send-SplunkHECEvent.ps1 to address a case where Splunk was treating unicode quotation characters as U+0022. PowerShell escapes U+0022 with ConvertTo-Json. This fix also escapes the other unicode quotation characters to prevent an error from Splunk HEC.
• Added a parameter to the ConvertTo-Json command to allow processing of deeper JSON objects.

v1.1.0

[1.1.0] - 2022-08-23

Added

• Send-SplunkHECEvent which sends one or more PowerShell objects to a Splunk HTTP Event Collector (HEC) endpoint as a json object.

v1.0.2

Initial release to Powershell Gallery.