What's New

Splunk Stream version 8.1.7 was released on October 13, 2026.

Splunk Stream 8.1.7 includes the following enhancements and updates:

• Protects the Stream forwarder management API on port 8889 with HTTP Basic authentication. This prevents unauthenticated local processes from reading the shared secret, changing capture configuration, or registering senders.
• Adds an in-product warning when Stream forwarder authentication is deactivated.
• Prevents XML parsers used by Splunk Stream from resolving external entities, loading DTDs, or making network requests.
• Moves internal shared-key authentication in Splunk Stream from URLs to request headers to avoid exposing credentials in URLs and logs.
• Updates security-sensitive components: OpenSSL 3.5.7, libpcap 1.10.6, Npcap 1.87, and cryptography 46.0.7.
• Adds compatibility with Splunk Enterprise 9.4 and Python 3.13 for Stream scripted inputs and REST handlers.
• Fixes an issue in which Stream forwarder sign-in with non-ASCII usernames or passwords, authenticated UI requests, and HEC data submissions could fail with HTTP 403 after management authentication is enabled.
• Improves setup diagnostics for missing management credentials.
• Fixes RHEL 8 DPDK capture setup to support compressed UIO kernel modules, bind NICs to the UIO driver, and restore interfaces to their original drivers when capture stops.
• Updates DPDK compatibility with RHEL 8 kernels and fixes a network-driver timeout build issue.
• Updates Windows capture packaging for Npcap 1.87 to include the required Visual C++ runtime and fixes associated sFlow build compatibility issues.
• Adds add-on configuration triggers to avoid unnecessary reloads during app validation and inspection.

For more information about known and resolved issues, see Known issues and Fixed issues.

Splunk Stream version 8.1.6 was released on March 2, 2026.

This release contains a number of bug fixes.

For more information, see Fixed issues and Known issues.