Fixed issues for Splunk Security Essentials

This release of Splunk Security Essentials includes fixes for the following issues.

Fixed issues

Splunk Security Essentials 3.8.3

Date resolved Issue number Description
2025-12-17 SSE-1106 Static “row_id” field issue for MITRE ATT&CK Benchmark
2025-12-10 SSE-1105 Search for Microsoft Sysmon logs is incorrect
2025-11-02 SSE-1107 Error in Generate Data Availability ML Model for Latency saved search
2025-11-25 SSE-1099 Data Source mapping issue in Content Overview, MITRE ATT&CK, and Cyber Kill Chain pages
2025-11-25 SSE-1110 Drill-down to Security Content page results in all content being shown
2025-12-17 SSE-1139 Sankey visualization error in Content Overview page
2025-12-17 SSE-1136 Custom content creation using saved searches does not add MITRE ID mapping despite annotations
2025-12-12 SSE-1134 MITRE Attack Benchmark not showing selected row as $drilldown_technique$ during initial load

Splunk Security Essentials 3.8.1

Date resolved Issue number Description
2024-10-23 SSE-1057 SSE 3.8.0 and earlier not compatible with Python 3.9.x
2024-10-03 SSE-1052 Splunk Security Essentials tooltip showing raw HTML
2024-10-03 SSE-1051 Splunk Security Essentials Manage bookmarks "Export as doc" is not working
2024-10-02 SSE-1039 Unable to get all the data detected with automatic introspection
2024-09-22 SSE-1026 Bookmarking after a search bookmarks all content instead of just the searched items
2024-09-12 SSE-1034 Security Content page load failing with message "Cannot read properties of undefined (reading 'toString')" and the security content is shown as undefined
2024-09-12 SSE-1043 Dashboards of Selected Content are not populating desired data in MITRE ATT&CK Framework
2024-09-04 SSE-1033 Splunk Security Essential v3.8: UI Error in CIM_complience and data_inventory_overview page "Error in 'sseidenrichment' command: (AttributeError) module 'time' has no attribute 'clock'"
2024-09-01 SSE-1024 On the Security Content page hovering over MITRE T&T's shows incorrect 'codes'
2024-08-09 SSE-1011 Some custom content from the SSE 3.7.1 backup is not restored in SSE 3.8.0.
2024-07-22 SSE-1015 Manage bookmarks: The content showcase mapping is removed from other content and is instead saved in the "last saved content" section for the same selected content.
2024-07-01 SSE-1018 The MITRE dashboard displays an error after upgrading from version 3.7.1 to 3.8.0.

Splunk Security Essentials 3.8.0

Date resolved Issue number Description
2024-03-05 SSE-981 Splunk Security Essentials returns an error if PYTHONHTTPSVERIFY = 1
2024-03-05 SSE-980 Data Inventory page isn't loading resources such as icons, network failures and so on.
2024-01-31 SSE-968 Bookmark count mismatch on the Manage Bookmarks page
2024-01-09 SSE-931 Content mapping button not loading
2023-11-15 SSE-945 You can't add new custom content to the list of custom content from Splunk Security Essentials version 3.7.1.
2023-05-18 SSE-889 Rename "Data Source Check" dashboard to "Posture Dashboards" in the UI.