At Splunk, we continuously focus on the security of the Splunk Cloud Platform. As part of that effort, we announced the deprecation of libraries older than jQuery v3.5 in early 2021. These changes will enhance the security of your product, and will require action from you to update Classic (Simple XML) dashboards, HTML dashboards, applications installed from Splunkbase, and private applications.
Starting in the second half of calendar year 2022, we plan to remove support for jQuery libraries older than v3.5 in new versions of Splunk Cloud Platform.
Step 1: Update your Classic (Simple XML) and HTML dashboards
Update Classic (Simple XML) dashboards that use jQuery libraries prior to v3.5
- Simple XML Dashboard version 1.0
- Dashboards load with older versions of jQuery
- Simple XML Dashboard version 1.1
- Dashboards load with jQuery 3.5
Admins will need to work with dashboard owners to update Simple XML dashboards to v1.1.
As a Splunk Admin you can check the jQuery Upgrade dashboard to see which dashboards are affected. To open the jQuery Upgrade dashboard, open the Search & Reporting App and click Dashboards, then jQuery Upgrade Dashboard.
HTML dashboards have been deprecated and can be rebuilt in one of the following ways:
- Rebuild your HTML dashboards in Dashboard Studio. Dashboards created or rebuilt in Dashboard Studio don't need updates for jQuery 3.5. For more information about Dashboard Studio, see What is the Splunk Dashboard Studio?
Do not update Classic (Simple XML) or HTML dashboards that are provided by a third party app developer. App developers will be required to update their apps and dashboards. You will only need to update Classic (Simple XML) or HTML dashboards that were created by end users in your organization.
Step 2: Update public and private apps that use jQuery libraries prior to v3.5
Make sure that you update all business-critical Splunkbase and private applications in time for the removal of older jQuery libraries. You should also review the jQuery Scan section in the Upgrade Readiness App, which has been introduced starting in Splunk Cloud Platform v8.2.2109, to see which Splunkbase or private apps require an update.
For third-party apps, It is the app developer’s responsibility to ensure their applications are updated with jQuery v3.5. If you are unsure if a third-party app will be updated, you can contacting the application owner through the app page on Splunkbase via the Contact Developer option.
Please ensure your Splunk Cloud Platform instance, dashboards, premium solutions, Splunkbase applications as well as private applications are upgraded to help us make your Splunk Cloud Platform instance more secure.