Deprecated features

Deprecated features

Platform support

• Splunk platform support: Starting in Splunk 5.0, supported platforms for Splunk will be identified as either Enterprise, Free/Trial, or Universal Forwarder.
  • Enterprise: Full Splunk features and functions.
  • Free/Trial: May be downloaded for demo and free use. May not support all features and functions.
  • Universal Forwarder: Platforms that support the Splunk universal forwarder.

Platforms deprecated

• Windows Vista x86 & x86_64: Enterprise support for Windows Vista x86 & x86_64 is deprecated, and might be removed entirely in a future release. Free/Trial & Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
• Windows XP x86 & x86_64: Enterprise and Free/Trial support for Windows XP x86 & x86_64 is deprecated, and might be removed entirely in a future release. Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
• Solaris 8 SPARC: Enterprise & Free/Trial support for Solaris 8 SPARC is deprecated, and might be removed entirely in a future release. Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
• Solaris 9 x86, x86_64, & SPARC: Enterprise & Free/Trial support for Solaris 9 x86, x86_64, & SPARC is deprecated, and might be removed entirely in a future release. Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
• FreeBSD 6.x x86 & x86_64: Universal Forwarder support for FreeBSD 6.x x86 & x86_64 is deprecated, and might be removed entirely in a future release. FreeBSD 7.x and 8.x remain generally available in 5.0 and there are currently no plans to reduce support.
• Linux Kernel 2.4 x86: Enterprise & Free/Trial support for Linux Kernel 2.4 x86 is deprecated, and might be removed entirely in a future release. Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
• Mac OS X Leopard (10.5): Enterprise, Free/Trial, & Universal Forwarder support for Mac OS X Leopard (10.5) is deprecated, and might be removed entirely in a future release.
• Mac OS X Snow Leopard (10.6): Enterprise support for Mac OS X Snow Leopard (10.6) is deprecated, and might be removed entirely in a future release. Free/Trial & Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
• AIX 5.2: Universal Forwarder support for AIX 5.2 is deprecated, and might be removed entirely in a future release. AIX 5.3 and 6.1 Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
• AIX 5.3: Enterprise and Free/Trial support for AIX 5.3 are deprecated, and might be removed entirely in a future release. The Universal Forwarder package for AIX 5.3 remains generally available in 5.0 and there are currently no plans to reduce support.
• HP-UX 11i v2 & v3 for PA-RISC: Enterprise & Free/Trial support for HP-UX 11i v2 & v3 for PA-RISC is deprecated, and might be removed entirely in a future release. Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.

Platforms removed

• FreeBSD 6.x x86 & x86_64: Enterprise and Free/Trial support for FreeBSD 6.x is removed.
• AIX 5.2: Enterprise and Free/Trial support for AIX 5.2 is removed.

Feature support

The following features have been deprecated or removed from Splunk version 5.0:

Features deprecated

• FSchange monitor: This feature is deprecated and might be removed entirely in a future release.

• Saved searches used within event types: This feature is deprecated and might be removed in a future release.

• Event type auto-discovery: This feature is deprecated and might be removed in a future release.

• Round-robin load balancing: This feature was deprecated in Splunk 4.2. Automatic load balancing is now the default.

• Distributed block signing and event hashing: This feature is deprecated and might be removed in a future release.

• CHECK_FOR_HEADER props.conf attribute (for index-time field extractions): This feature is deprecated and might be removed in a future release.

• entity.setEntity Python SDK function: This feature is deprecated and might be removed in a future release.

• Splunk modules: The following Splunk modules (elements of a view or dashboard) have been deprecated and might be removed in a future release:
  • AdvanceModeToggle
  • AjaxInclude
  • AsciiTimeline
  • CakeBrushFormatter
  • ConvertToRedirect
  • DistributedSearchServerChooser
  • HiddenIntention
  • IndexesSizes
  • MultiplexSparkline
  • PostProcessBar
  • SavedSearches
  • Segmentation
  • SimpleEventsView

Features removed

• Multicast search peer discovery: Explicit peer configuration with SSL security replaces this feature. The following settings in distsearch.conf have been removed:
  • heartbeatMcastAddr
  • heartbeatPort
  • ttl
  • heartbeatFrequency

• HTTP out monitor: This feature has been removed from the product, and no alternative exists for it.

Deprecated features and platforms will continue to work and Splunk will support them through the 5.0.x lifecycle. However, customers should begin planning now for the future removal of these features from the supported set of products.

• Was this topic useful?
• Post a comment