Fixed issues

Splunk Enterprise 7.2.2 was released on December 19, 2018. This release includes fixes for the following issues.

Issues are listed in all relevant sections. Some issues might appear more than once. To check for additional security issues related to this release, visit the Splunk Security Portal.

Search issues

Date resolved	Issue number	Description
2018-12-05	SPL-163564, SPL-162448	|metadata search error - Failed to apply deletes to some metadata

Authentication and Authorization issues

Date resolved	Issue number	Description
2018-12-05	SPL-163568, SPL-159552	SAML - "role" not parsing comma separated list

Admin and CLI issues

Date resolved	Issue number	Description
2018-10-23	SPL-161134, SPL-142345	SHOULD_LINEMERGE always shows true on UI when there is a LINE_BREAKER setting in sourcetype

Uncategorized issues

Date resolved	Issue number	Description
2018-12-06	SPL-163566, SPL-159413	"Failed to localize" due to "ERROR CacheManagerHandler"..."not an owner"..."and the bucket is draining"
2018-12-05	SPL-163577, SPL-162469	After upgrade to 7.2 Splunk is unable to start - KVStoreConfigurationThread crash
2018-12-04	SPL-163104, SPL-162781	KV store is unavailable after SHC instance upgrade to Version 7.1 or 7.2
2018-08-15	SPL-156258, SPL-158810	Deleted workload pool is displayed in the bound workload rule.