26.10.1 - 2026-10-26
Supports collectorformacos version 26.10.x
First release of Monitoring macOS and Collectord for macOS (collectorformacos).
- Collectord for Apple Silicon Macs with macOS 14 or later: a package that runs it as a LaunchDaemon, a Homebrew cask, and configuration profiles for MDM - the settings as managed preferences, and Managed Login Items
- Stats to a Splunk metrics index: CPU per core and cluster with the frequencies, memory and memory pressure, GPU and Neural Engine, power, thermals and fans, disks, filesystems, network, processes, virtual machines, batteries, security posture, pending updates, launchd services, Xcode, and macOS Security Compliance Project results
- Events to an events index: the unified log through log packs, with a rate cap and a noise sampler; crash, hang, jetsam and kernel panic summaries; boots, sleep, pressure, logins, account, setting, launch item and background item changes; connections by application; the installed applications; the install log
- Each source that names people or programs has its own switch; nothing reads per-app usage time, Wi-Fi network names or location, and no Full Disk Access or other privacy permission is needed
- Dashboards under Overview, Hardware, Workloads, Health and Setup, from the Fleet Overview to App Connections, Laptops, Virtual Machines, Xcode and CI, Crashes and Panics, Updates and Posture, Compliance, Security and Log Packs
- An Alert Catalog of 42 templates for Splunk admins, the platform team, security and application teams
- Common Information Model mappings for Authentication, Change, Endpoint, Network Traffic and Updates, for Splunk Enterprise Security