-
New classes have been added for creating a modular input. They are all under
Splunk.ModularInputs
namespace. An example of creating such a modular input is added. -
More specialized args classes have been added to make it easier to pass operation-specific arguments:
JobEventsArgs
JobExportArgs
JobResultsArgs
JobResultsPreviewArgs
SavedSearchDispatchArgs
ReceiverSubmitArgs
These new args classes are used with the following methods:
Service.Export
methodJob.Results
methodJob.ResultsPreview
methodJob.Events
methodSavedSearch.Dispatch
methodReceiver.Submit
method
- The SDK now supports running with .NET Framework 3.5, in addition to .NET Framework 4.0 and .NET Framework 4.5. The SDK assembly's target framework is now .NET Framework 3.5. The Newtonsoft.Json assembly (used by
ResultsReaderJson
andMultiResultsReaderJson
) is now Net35 version of Json.NET 5.0 Release 4.
JobArgs.ExecMode
has been renamed toJobArgs.ExecutionMode
, and changed from string type to enum type.JobArgs.ExecutionMode
andJobArgs.SearchMode
have been changed to Enum types.JobArgs.RemoteServerList
has been changed from string type to string array type.SavedSearchArgs
class has been renamed toSavedSearchDispatchArgs
.- A few Atom parsing methods were changed from public to internal.
-
Upgraded to Json.NET 4.5 (used by
ResultsReaderJson
andMultiResultsReaderJson
) Release 11 -
Removed obsolete methods
-
Code cleanup
- New classes have been added for reading search results,
ResultsReaderXml
to read search results streams in XML output format.MultiResultsReaderXml
andMultiResultsReaderJson
, to read search results streams with multiple result sets fromService.Export
methods, andEvent
to support type conversions of event field values.
- Events are returned from result reader classes though
IEnumerable<Event>
- Fixed
Receiver.Attach
to support submitting events to Splunk through SSL.
Initial Splunk SDK for C# in private testing.