Splunk® Enterprise

Release Notes

Splunk Enterprise version 8.0 is no longer supported as of October 22, 2021. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.

Fixed issues

Splunk Enterprise 8.0.2.1

Splunk Enterprise 8.0.2.1 was released on March 11, 2020. This release fixes the following issue.

Date filed Issue number Description
2020-03-04 SPL-184234, SPL-183532 Search head performance degraded after upgrade to version 8.0.2.

Splunk Enterprise 8.0.2

Splunk Enterprise 8.0.2 was released on February 11, 2020. This release includes fixes for the following issues.

Issues are listed in all relevant sections. Some issues might appear more than once. To check for additional security issues related to this release, visit the Splunk Security Portal.

Search issues

Date resolved Issue number Description
2020-01-08 SPL-180253, SPL-174425 outputlookup with the setting, override_if_empty=false does not work for KVStore lookups.
2020-01-07 SPL-179583, SPL-179771 Issue searching for some non-ascii character, no results returned
2020-01-06 SPL-181330, SPL-181303 Rex mode sed - 7.1.0+ - Sed with caret (^) is giving an incorrect result/not functioning as expected
2020-01-06 SPL-179453, SPL-177399 Search on indexers crashes in reverse_lookup when working with kvstore lookup (use_lookups_v2=false)
2020-01-06 SPL-180933, SPL-178545 Recursive _SOURCETYPE settings block splunkd startup.
2020-01-06 SPL-177991, SPL-176123 Subsearch getting executed during summayId generation causing an additional run of the same subsearch
2020-01-06 SPL-181366, SPL-180038 Search performance decreases (long running searches) with high index deployments (2K indexes)
2020-01-06 SPL-180268, SPL-177675 Crash in BucketSummaryActorThread for a specific summary directory, persists after removing
2019-12-16 SPL-179186, SPL-177657 After upgrade to Core 7.3.x, RT Search cannot fire Alerts due to "Not a gzipped file"
2019-12-12 SPL-180261, SPL-179427 A rest call with XML email attachment treats "\n" as regular characters following a ">"
2019-11-25 SPL-179357, SPL-179700 Negated subnet CIDR filter doesn't work in search.

Saved search, alerting, scheduling, and job management issues

Date resolved Issue number Description
2020-01-07 SPL-174680, SPL-169912 SHC - Alert Scheduler - Next Scheduled Time does not update if cron-scheduler is updated from Deployer
2020-01-06 SPL-177312, SPL-175380 When alert condition is not met, scheduled searches are deferred, leading to skip searches
2019-12-16 SPL-179186, SPL-177657 After upgrade to Core 7.3.x, RT Search cannot fire Alerts due to "Not a gzipped file"
2019-12-10 SPL-179987, SPL-178839 datamodels.conf does not respect stanza

Data model and pivot issues

Date resolved Issue number Description
2020-01-07 SPL-174680, SPL-169912 SHC - Alert Scheduler - Next Scheduled Time does not update if cron-scheduler is updated from Deployer
2020-01-06 SPL-177312, SPL-175380 When alert condition is not met, scheduled searches are deferred, leading to skip searches
2019-12-16 SPL-179186, SPL-177657 After upgrade to Core 7.3.x, RT Search cannot fire Alerts due to "Not a gzipped file"
2019-12-10 SPL-179987, SPL-178839 datamodels.conf does not respect stanza

Indexer and indexer clustering issues

Date resolved Issue number Description
2020-01-07 SPL-176154, SPL-168257 Indexers are flapping (up or pending) due to "non-streaming failure"
2020-01-02 SPL-178824, SPL-178208 Indexer cluster bundle push fails: _metrics missing from _cluster/default/indexes.conf
2019-12-13 SPL-180282, SPL-178632 Fixup stuck after reprovisioning an indexer in SmartStore enabled cluster.

Distributed search and search head clustering issues

Date resolved Issue number Description
2020-01-09 SPL-181498, SPL-181031 | metasearch + BatchMode order of magnitude slower than 7.2
2020-01-07 SPL-177531, SPL-174796 dispatch folder with cancel file not getting reaped
2020-01-06 SPL-178240, SPL-176796 Corrupted Raft entry files crashes SH instance node
2019-12-11 SPL-179985, SPL-175387 app.conf not being replicated in SHC gives end user false promises of ui functionality

Data Fabric Search issues

Date resolved Issue number Description
2020-01-09 SPL-181315, SPL-180880 Non-escaped Brackets in dfsjob results in being interpreted as search command

Splunk Web and interface issues

Date resolved Issue number Description
2019-12-06 SPL-179999 Show source action is not working when root endpoint is enabled

Windows-specific issues

Date resolved Issue number Description
2020-01-06 SPL-180763, SPL-167310 Error in splunkd.log "splunk-perfmon - OutputHandler::composeOutput: Counter is not found: "

Admin and CLI issues

Date resolved Issue number Description
2020-01-07 SPL-181116, SPL-181085 Jan 1 2020 Bug: 7.3.3 datetime.xml has a misleading line (comment line 198) should be 2023 not 2017
2020-01-03 SPL-180151, SPL-173365 UI displaying incorrect results from Data Model List view

Uncategorized issues

Date resolved Issue number Description
2020-01-09 SPL-180809, SPL-143274 search optimizer incorrectly removes _time projections which precede transaction commands
2020-01-08 SPL-178723, SPL-152457 splunkd.log WARN TelemetryHandler - 1521648000.000000
2020-01-06 SPL-179833, SPL-176211 Indexer crashes in updateBucketsCreatedCountHealth due to thread concurrency issues
2020-01-06 SPL-179936, SPL-179772 Script to create Self Signed default web SSL cert add's "/opt/splunk/" to path in Web.conf
2020-01-06 SPL-180193, SPL-177752 Deadlock in splunk when using pstacks action
2019-12-18 SPL-180148, SPL-179256 kvstore inputlookup with large 'where' filter fails silently when hitting 300 second timeout
2019-12-17 SPL-181017, SPL-164839 systemd warnings about Splunkd.service being executable and world-inaccessible
2019-12-16 SPL-180718, SPL-179930 Uncategorized sourcetypes wont show the full list in IFX
2019-12-11 SPL-180518, SPL-174286 Using timechart AS clause with wildcard and a constant (*_x) in fast mode returns too many columns
2019-12-09 SPL-180474, SPL-178148 Disable edit operation in HEC manager page for non-DMC search heads
2019-11-21 SPL-179545, SPL-179201 Predicate search_time_range does not work with monitoring actions (abort, move, alert) for historical searches
2019-11-20 SPL-179562, SPL-179459 Predicates search_time_range doesn't work with scheduled searches

Splunk Analytics Workspace

Date resolved Issue number Description
2019-11-22 MAW-3066, MAW-3037 Error may occur when saving an alert on a duplicate series
Last modified on 14 May, 2020
Timestamp recognition of dates with two-digit years fails beginning January 1, 2020   Deprecated and removed in version 8.0

This documentation applies to the following versions of Splunk® Enterprise: 8.0.2

Acrobat logo Download manual
Acrobat logo Download this page

Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters