Snare Agent and SAM software Support Matrix

The Snare agents allow event logs collected by the Windows, Linux, Mac OSX and Solaris operating systems as well as specialized agent for Microsoft SQL Server. The tables below cover the major operating and SQL system versions that are supported.

Language support

Please note that Snare only supports single byte characters (generally a-z,A-Z,0-9). For systems that require greater than single byte character support, it is recommended to run those systems with regional settings that utilise single byte characters.

Platform / Operating System

Windows (64-bit)

Version

Windows Enterprise 5.x

Windows Desktop 5.x

WEC 5.x

Epilog 5.x

MS SQL v5.x

Windows Snare Agent Manager (SAM)

Version

Windows Enterprise 5.x

Windows Desktop 5.x

WEC 5.x

Epilog 5.x

MS SQL v5.x

Windows Snare Agent Manager (SAM)

2025

TBC

TBC

TBC

TBC

TBC

TBC

2022

>= 5.5.1

 

>= 5.5.1

>= 5.5.1

>= 5.5.1

>= 1.5.1

2019

 

2016

 

2012R2

 

2012

 

2008R2

 

2008

 

2008 (32 bit)

<=5.1.0
This platform is no longer updated

 

 

<=5.1.0
This platform is no longer updated

<=5.1.0
This platform is no longer updated

 

2003 ( 32/64 bit)

<=5.1.0
This platform is no longer updated

 

 

<=5.1.0
This platform is no longer updated

<=5.1.0
This platform is no longer updated

 

11

10

8.1

 

 

 

7

 

XP (32/64 bit)

<=5.1.0 -This platform is no longer updated

<=5.1.0 -This platform is no longer updated

 

 

 

 

These platforms may work, but they are unsupported by Microsoft and are not tested.

Microsoft MS SQL

Version

MS SQL 5.x

Version

MS SQL 5.x

SQL 2022

SQL 2019

SQL 2017

SQL 2016

SQL 2014

SQL 2012

SQL 2008

Linux Operating Systems

Version

Linux v5.x for relevant platform

Version

Linux v5.x for relevant platform

RHEL 9.0

>=5.7.0

RHEL 8.2

>=5.4.1

RHEL 8.1

>=5.4.1

RHEL 8.0

>=5.4.1

RHEL 7.9

<=5.8.1
This platform is no longer updated

RHEL 7.8

<=5.8.1
This platform is no longer updated

RHEL 7.7

<=5.8.1
This platform is no longer updated

RHEL 7.6

<=5.8.1
This platform is no longer updated

RHEL 7.5

<=5.8.1
This platform is no longer updated

RHEL 7.4

<=5.8.1
This platform is no longer updated

RHEL 7.3

<=5.8.1
This platform is no longer updated

RHEL 7.1

<=5.8.1
This platform is no longer updated

RHEL 7.0

<=5.8.1
This platform is no longer updated

RHEL 6.9

<=5.5.1
This platform is no longer updated

RHEL 6.8

<=5.5.1
This platform is no longer updated

RHEL 6.7

<=5.5.1
This platform is no longer updated

RHEL 6.5

<=5.5.1
This platform is no longer updated

RHEL 6.4

<=5.5.1
This platform is no longer updated

RHEL 6.3

<=5.5.1
This platform is no longer updated

Oracle Linux 9

>=5.7.1

Oracle Linux 8

>=5.5.0

Ubuntu 24.04

>=5.9.0

Ubuntu 22.04

>=5.7.0

Ubuntu 20.04

>=5.5.0

Ubuntu 18.04

Ubuntu 16.04

<= 5.8.1
This platform is no longer updated

Ubuntu 14.04

<= 5.8.1
This platform is no longer updated

Debian 12

>=5.8.0

Debian 11

>=5.7.0

Debian 10

>=5.5.0

Debian 9

5.3.3 - 5.8.1

SLES/SLED 15 SP5 and higher (audit v3)

>= 5.7.1

SLES/SLED 15 SP4 (audit v3)

>= 5.7.1 Refer to the KB article

SLES/SLED 15 up to SP3 (audit v2)

5.6.0 - 5.7.0

SLES/SLED 12

>=5.3.3

Alma Linux 9

>=5.7.1

Alma Linux 8

>=5.7.1

Apple macOS (Intel 64-bit)

Version

Agent Versions

Version

Agent Versions

15

TBC

14

>=5.9.0

13

>=5.8.1

12

5.7.0 - 5.8.1

11

5.4.2 - 5.8.1

10.15

5.4.0 - 5.5.1

10.14

5.3.0 - 5.4.1

10.13

1.1.7 (EOL)

10.12

1.1.7 (EOL)

Apple macOS (Apple silicon)

Version

Agent Versions

Version

Agent Versions

15

TBC

14

>=5.9.0

13

>=5.8.1

12

5.7.1 - 5.8.1

<=11

Not Supported

Solaris (x86 and Sparc)

Version

Version 4.x

Version

Version 4.x

Solaris 11.4+

Not Supported

Solaris 11.3

Solaris 11.2

Solaris 11.1

Solaris 10