Considerations for users of Splunk 3.4.x
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Considerations for users of Splunk 3.4.x
Splunk 4 and later represents a huge stride forward in performance and flexibility, but there are a few interaction changes vs. 3.4.x which upgraders should be aware of, and even some reasons why you might want to wait for a future release before upgrading. Below are some capabilities that have changed with the introduction of Splunk 4:
Snapshots
- In Splunk 4+, we've improved upon 3.x's ability to take a timeline snapshots of individual searches. Try out the new job manager which allows you to retrieve the entire cached search result, including reports, from existing searches.
Event scrolling
- In Splunk 4+, the new page selector allows you to hop between results with greater flexibility, even as a search runs. However, for those who still prefer a scroll bar, expect this capability to be re-introduced as an option in a future 4.x release.
Crawl
- Crawl is no longer configurable via Splunk Web, but is still available as a CLI-only search command. Based on customer feedback, we have decided to re-architect this feature to make it easier and more effective. Expect improved functionality, along with a new user interface to be introduced in a future release.
Deployment
- Splunk 4.0.x Deployment server is not compatible with Splunk Deployment client 3.x.
This documentation applies to the following versions of Splunk: 4.1 , 4.1.1 , 4.1.2 , 4.1.3 , 4.1.4 , 4.1.5 , 4.1.6 , 4.1.7 , 4.1.8 View the Article History for its revisions.