Branch was auto-updated.

data_sources/aws_cloudfront.yml

@@ -9,7 +9,7 @@ sourcetype: aws:cloudfront:accesslogs
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail.yml

@@ -10,5 +10,4 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
-
+  version: 7.7.1

data_sources/aws_cloudtrail_assumerolewithsaml.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_consolelogin.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_copyobject.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - additionalEventData.AuthenticationMethod

data_sources/aws_cloudtrail_createaccesskey.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_createkey.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_createloginprofile.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_createnetworkaclentry.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_createpolicyversion.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_createsnapshot.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_createtask.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_createvirtualmfadevice.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_deactivatemfadevice.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_deleteaccountpasswordpolicy.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_deletealarms.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action
@@ -121,4 +121,21 @@ fields:
 - vendor_account
 - vendor_product
 - vendor_region
-example_log: '{"eventVersion": "1.08", "userIdentity": {"type": "AssumedRole", "principalId": "AROAYTOGP2RLKZK7JIDWN:AutoScaling-ManageAlarms", "arn": "arn:aws:sts::111111111111:assumed-role/AWSServiceRoleForApplicationAutoScaling_DynamoDBTable/AutoScaling-ManageAlarms", "accountId": "111111111111", "accessKeyId": "ASIAYTOGP2RLJ7ZZZZZZZ", "sessionContext": {"sessionIssuer": {"type": "Role", "principalId": "AROAYTOGP2RLKZK7JIDWN", "arn": "arn:aws:iam::111111111111:role/aws-service-role/test.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_DynamoDBTable", "accountId": "111111111111", "userName": "AWSServiceRoleForApplicationAutoScaling_DynamoDBTable"}, "webIdFederationData": {}, "attributes": {"creationDate": "2023-07-11T11:11:59Z", "mfaAuthenticated": "false"}}, "invokedBy": "test.amazonaws.com"}, "eventTime": "2023-07-11T11:12:00Z", "eventSource": "monitoring.amazonaws.com", "eventName": "DeleteAlarms", "awsRegion": "us-west-1", "sourceIPAddress": "test.amazonaws.com", "userAgent": "test.amazonaws.com", "requestParameters": {"alarmNames": ["TargetTracking-table/attack-range-orchestrator-backend-AlarmHigh-bbc5c675-6ddb-40d5-9f16-a59147a61c2a", "TargetTracking-table/attack-range-orchestrator-backend-AlarmLow-1669f952-dd7b-4835-b3d5-8df86d264db2", "TargetTracking-table/attack-range-orchestrator-backend-ProvisionedCapacityHigh-eac39cba-2339-4c5c-9a13-c527ede7abfd", "TargetTracking-table/attack-range-orchestrator-backend-ProvisionedCapacityLow-62c8a6e3-edb4-42d1-b26d-e30f33a57a0e"]}, "responseElements": null, "requestID": "af48ccab-e844-4229-883e-5c813e2c2f31", "eventID": "bcfccd92-5bf1-4de1-9cfd-87fdeb70e452", "readOnly": false, "eventType": "AwsApiCall", "managementEvent": true, "recipientAccountId": "111111111111", "eventCategory": "Management"}'
+example_log: '{"eventVersion": "1.08", "userIdentity": {"type": "AssumedRole", "principalId":
+  "AROAYTOGP2RLKZK7JIDWN:AutoScaling-ManageAlarms", "arn": "arn:aws:sts::111111111111:assumed-role/AWSServiceRoleForApplicationAutoScaling_DynamoDBTable/AutoScaling-ManageAlarms",
+  "accountId": "111111111111", "accessKeyId": "ASIAYTOGP2RLJ7ZZZZZZZ", "sessionContext":
+  {"sessionIssuer": {"type": "Role", "principalId": "AROAYTOGP2RLKZK7JIDWN", "arn":
+  "arn:aws:iam::111111111111:role/aws-service-role/test.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_DynamoDBTable",
+  "accountId": "111111111111", "userName": "AWSServiceRoleForApplicationAutoScaling_DynamoDBTable"},
+  "webIdFederationData": {}, "attributes": {"creationDate": "2023-07-11T11:11:59Z",
+  "mfaAuthenticated": "false"}}, "invokedBy": "test.amazonaws.com"}, "eventTime":
+  "2023-07-11T11:12:00Z", "eventSource": "monitoring.amazonaws.com", "eventName":
+  "DeleteAlarms", "awsRegion": "us-west-1", "sourceIPAddress": "test.amazonaws.com",
+  "userAgent": "test.amazonaws.com", "requestParameters": {"alarmNames": ["TargetTracking-table/attack-range-orchestrator-backend-AlarmHigh-bbc5c675-6ddb-40d5-9f16-a59147a61c2a",
+  "TargetTracking-table/attack-range-orchestrator-backend-AlarmLow-1669f952-dd7b-4835-b3d5-8df86d264db2",
+  "TargetTracking-table/attack-range-orchestrator-backend-ProvisionedCapacityHigh-eac39cba-2339-4c5c-9a13-c527ede7abfd",
+  "TargetTracking-table/attack-range-orchestrator-backend-ProvisionedCapacityLow-62c8a6e3-edb4-42d1-b26d-e30f33a57a0e"]},
+  "responseElements": null, "requestID": "af48ccab-e844-4229-883e-5c813e2c2f31", "eventID":
+  "bcfccd92-5bf1-4de1-9cfd-87fdeb70e452", "readOnly": false, "eventType": "AwsApiCall",
+  "managementEvent": true, "recipientAccountId": "111111111111", "eventCategory":
+  "Management"}'

data_sources/aws_cloudtrail_deletedetector.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_deletegroup.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_deleteipset.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_deleteloggroup.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - apiVersion

data_sources/aws_cloudtrail_deletelogstream.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - apiVersion

data_sources/aws_cloudtrail_deletenetworkaclentry.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_deletepolicy.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_deleterule.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - apiVersion

data_sources/aws_cloudtrail_deletesnapshot.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action
@@ -128,4 +128,18 @@ fields:
 - vendor_account
 - vendor_product
 - vendor_region
-example_log: '{"eventVersion": "1.09", "userIdentity": {"type": "AssumedRole", "principalId": "AROAYTOGP2RLDF6WPXXXX:daftpunk@splunk.com", "arn": "arn:aws:sts::11111111111111:assumed-role/AWSReservedSSO_SPLKAdministratorAccess_d9ce1347d0a6dd3f/daftpunk@splunk.com", "accountId": "11111111111111", "accessKeyId": "AAAAAAAAAAAAAAAAAA", "sessionContext": {"sessionIssuer": {"type": "Role", "principalId": "AROAYTOGP2RLDF6WPXXXX", "arn": "arn:aws:iam::11111111111111:role/aws-reserved/sso.amazonaws.com/us-west-2/AWSReservedSSO_SPLKAdministratorAccess_d9ce1347d0a6dd3f", "accountId": "11111111111111", "userName": "AWSReservedSSO_SPLKAdministratorAccess_11"}, "attributes": {"creationDate": "2024-01-18T09:55:32Z", "mfaAuthenticated": "false"}}}, "eventTime": "2024-01-18T10:02:08Z", "eventSource": "ec2.amazonaws.com", "eventName": "DeleteSnapshot", "awsRegion": "eu-central-1", "sourceIPAddress": "80.187.64.117", "userAgent": "AWS Internal", "requestParameters": {"snapshotId": "snap-0b5d5eaad2e6efa11", "force": false}, "responseElements": {"requestId": "86e4bb11-2a21-4a16-8c40-4c1bc08a9a03", "_return": true}, "requestID": "86e4bb11-2a21-4a16-8c40-4c1bc08a9a03", "eventID": "56f61d71-6620-4958-8dbf-03410913f1cc", "readOnly": false, "eventType": "AwsApiCall", "managementEvent": true, "recipientAccountId": "11111111111111", "eventCategory": "Management", "sessionCredentialFromConsole": "true"}'
+example_log: '{"eventVersion": "1.09", "userIdentity": {"type": "AssumedRole", "principalId":
+  "AROAYTOGP2RLDF6WPXXXX:daftpunk@splunk.com", "arn": "arn:aws:sts::11111111111111:assumed-role/AWSReservedSSO_SPLKAdministratorAccess_d9ce1347d0a6dd3f/daftpunk@splunk.com",
+  "accountId": "11111111111111", "accessKeyId": "AAAAAAAAAAAAAAAAAA", "sessionContext":
+  {"sessionIssuer": {"type": "Role", "principalId": "AROAYTOGP2RLDF6WPXXXX", "arn":
+  "arn:aws:iam::11111111111111:role/aws-reserved/sso.amazonaws.com/us-west-2/AWSReservedSSO_SPLKAdministratorAccess_d9ce1347d0a6dd3f",
+  "accountId": "11111111111111", "userName": "AWSReservedSSO_SPLKAdministratorAccess_11"},
+  "attributes": {"creationDate": "2024-01-18T09:55:32Z", "mfaAuthenticated": "false"}}},
+  "eventTime": "2024-01-18T10:02:08Z", "eventSource": "ec2.amazonaws.com", "eventName":
+  "DeleteSnapshot", "awsRegion": "eu-central-1", "sourceIPAddress": "80.187.64.117",
+  "userAgent": "AWS Internal", "requestParameters": {"snapshotId": "snap-0b5d5eaad2e6efa11",
+  "force": false}, "responseElements": {"requestId": "86e4bb11-2a21-4a16-8c40-4c1bc08a9a03",
+  "_return": true}, "requestID": "86e4bb11-2a21-4a16-8c40-4c1bc08a9a03", "eventID":
+  "56f61d71-6620-4958-8dbf-03410913f1cc", "readOnly": false, "eventType": "AwsApiCall",
+  "managementEvent": true, "recipientAccountId": "11111111111111", "eventCategory":
+  "Management", "sessionCredentialFromConsole": "true"}'

data_sources/aws_cloudtrail_deletetrail.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_deletevirtualmfadevice.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_deletewebacl.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - apiVersion

data_sources/aws_cloudtrail_describeeventaggregates.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_describeimagescanfindings.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_getaccountpasswordpolicy.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_getobject.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - additionalEventData.AuthenticationMethod

data_sources/aws_cloudtrail_getpassworddata.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_jobcreated.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_modifydbinstance.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_modifyimageattribute.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_modifysnapshotattribute.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_putbucketacl.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_putbucketlifecycle.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - additionalEventData.AuthenticationMethod

data_sources/aws_cloudtrail_putbucketreplication.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - additionalEventData.AuthenticationMethod

data_sources/aws_cloudtrail_putbucketversioning.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - additionalEventData.AuthenticationMethod

data_sources/aws_cloudtrail_putimage.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_putkeypolicy.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_replacenetworkaclentry.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_setdefaultpolicyversion.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_stoplogging.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudtrail_updateaccountpasswordpolicy.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_updateloginprofile.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_updatesamlprovider.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - action

data_sources/aws_cloudtrail_updatetrail.yml

@@ -10,7 +10,7 @@ separator: eventName
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - app

data_sources/aws_cloudwatchlogs_vpcflow.yml

@@ -8,9 +8,9 @@ source: aws_cloudwatchlogs_vpcflow
 sourcetype: aws:cloudwatchlogs:vpcflow
 separator: eventName
 supported_TA:
-  - name: Splunk Add-on for AWS
-    version: 7.7.0
-    url: https://splunkbase.splunk.com/app/1876
+- name: Splunk Add-on for AWS
+  version: 7.7.1
+  url: https://splunkbase.splunk.com/app/1876
 fields:
 - _raw
 - _time
@@ -65,4 +65,5 @@ fields:
 - vendor_product
 - version
 - vpcflow_action
-example_log: '2 123397614277 eni-0b0f9f261f45e6489 10.0.1.30 10.0.1.1 47254 22 17 2 98 1697608042 1697608070 ACCEPT OK'
+example_log: 2 123397614277 eni-0b0f9f261f45e6489 10.0.1.30 10.0.1.1 47254 22 17 2
+  98 1697608042 1697608070 ACCEPT OK

data_sources/aws_security_hub.yml

@@ -9,7 +9,7 @@ sourcetype: aws:securityhub:finding
 supported_TA:
 - name: Splunk Add-on for AWS
   url: https://splunkbase.splunk.com/app/1876
-  version: 7.7.0
+  version: 7.7.1
 fields:
 - _time
 - AwsAccountId