What changed in Splunk Enterprise 7.x for Windows STIG V3R2V3R2 changes

Splunk Enterprise 7.x for Windows STIG V3R2 (2025-07-02) replaced V3R1 (2024-07-24): 1 check added, 9 updated. It has 37 checks, against 36 in V3R1.

V3R2 checklistV3R1 checklist Compare V3R1 and V3R2 in STIG Compare

  • 1 added
  • 0 removed
  • 9 updated

Updated fields: CCIs 9

Added in V3R2 (1)

  • V-274464CAT ISplunk Enterprise must use a version supported by the vendor.

Updated in V3R2 (9)

V-221629CAT IIISplunk Enterprise must enforce password complexity for the account of last resort by requiring that at least one uppercase character be used.CCIs

CCIs

CCI-004066CCI-004066,CCI-000192

V-221629 in V3R2

V-221630CAT IIISplunk Enterprise must enforce password complexity for the account of last resort by requiring that at least one lowercase character be used.CCIs

CCIs

CCI-004066CCI-004066,CCI-000193

V-221630 in V3R2

V-221631CAT IIISplunk Enterprise must enforce password complexity for the account of last resort by requiring that at least one numeric character be used.CCIs

CCIs

CCI-004066CCI-004066,CCI-000194

V-221631 in V3R2

V-221632CAT IISplunk Enterprise must enforce a minimum 15-character password length for the account of last resort.CCIs

CCIs

CCI-004066CCI-004066,CCI-000205

V-221632 in V3R2

V-221633CAT IIISplunk Enterprise must enforce password complexity for the account of last resort by requiring that at least one special character be used.CCIs

CCIs

CCI-004066CCI-004066,CCI-001619

V-221633 in V3R2

V-221634CAT IIISplunk Enterprise must enforce a 60-day maximum password lifetime restriction for the account of last resort.CCIs

CCIs

CCI-004066CCI-004066,CCI-000199

V-221634 in V3R2

V-221937CAT IIISplunk Enterprise idle session timeout must be set to not exceed 15 minutes.CCIs

CCIs

CCI-004895CCI-004895,CCI-002038

V-221937 in V3R2

V-221939CAT IIISplunk Enterprise must notify the system administrator (SA) and information system security officer (ISSO) when account events are received (creation, deletion, modification, disabling).CCIs

CCIs

CCI-000015CCI-000015,CCI-001683,CCI-001684,CCI-001685,CCI-001686

V-221939 in V3R2

V-221940CAT IIISplunk Enterprise must notify analysts of applicable events for Tier 2 CSSP and JRSS only.CCIs

CCIs

CCI-000015CCI-000015,CCI-001683,CCI-001684,CCI-001685,CCI-001686

V-221940 in V3R2

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V3R2 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.