Fixed notable macro breaks due to two lookups with the same name: nist.csv

What's new in 8.1.1
July 17, 2025

Fixed Issues:
This section includes information on key issues that have been fixed in the 8.1.1 release of Splunk Enterprise Security.

• Issue Number: SOLNESS-51691
  Date: 2025-07-03
  Description: notable macro breaks due to two lookups with the same name: nist.csv
• Issue Number: SOLNESS-48923, BLUERIDGE-14095, SPL-274785
  Date: 2025-06-24
  Description: Saved views are not visible after upgrade from ES 7.0.2 to ES 8.0.2
• Issue Number: SOLNESS-51456
  Date: 2025-06-10
  Description: Filter bar above the Content Management table disappears in 8.1.0 after selecting sequence templates
• Issue Number: SOLNESS-51493
  Date: 2025-06-06
  Description: When creating a manual finding in ES 8.1, the default "Risk score" of zero is not accepted

- Issue Number: SOLNESS-51378
Date: 2025-06-04
Description: Editing the SPL for a dashboard panel data source has unexpected editing behavior

• Issue Number: SOLNESS-51478
  Date: 2025-06-04
  Description: Key indicators are not loading in simple XML dashboards
• Issue Number: BLUERIDGE-17097
  Date: 2025-06-27
  Description: Dispatch failure due to a 403 permission error when automation rules attempt to queue data for SOAR
• Issue Number: BLUERIDGE-17171, BLUERIDGE-16983
  Date: 2025-06-26
  Description: "Ooops! Something went Wrong!" error when loading investigation for ES 8.0.40

- Issue Number: BLUERIDGE-17107, MCHELP-620
Date: 2025-06-23
Description: Mission Control drilldown search time windows not accurate with All Time always showing

• Issue Number: BLUERIDGE-16966
  Date: 2025-06-23
  Description:indextime tokens fail to evaluate for automation rule findings
• Issue Number: BLUERIDGE-16983, BLUERIDGE-17171
  Date: 2025-06-10
  Description: Response template search fails for special characters due to URL encoding
• Issue Number: BLUERIDGE-16715
  Date: 2025-06-02
  Description: The finding side panel metafields reset after selecting Back to Queue button from investigation
• Issue Number: BLUERIDGE-16301
  Date: 2025-05-27
  Description: Urgency is incorrect on the side panel for findings created through detections with automation rule configured
• Issue Number: BLUERIDGE-16724
  Date: 2025-05-20
  Description: Using a non https url in the browser causes investigation page to crash
• Issue Number: SINT-7508
  Date: 2025-06-10
  Description: Unprivileged users should see helpful messages in the UI instead of failures
• Issue Number: SINT-7539
  Date: 2025-05-27
  Description: Wrong message on the tooltip after deleting a threat list
• Issue Number: SINT-7541
  Date: 2025-05-23
  Description: After pairing, an "unhealthy" message flashes for a second before it refreshes and says the connection is "healthy"