Splunk® Universal Forwarder

Forwarder Manual

This documentation does not apply to the most recent version of Splunk® Universal Forwarder. For documentation on the most recent version, go to the latest release.

Fixed issues

The following issues were fixed in releases of the universal forwarder.

9.1.5

Version 9.1.5 was released on July 1, 2024. This release fixes the following universal forwarder issues.

Universal forwarder issues

Date resolved Issue number Description
2024-03-13 SPL-252445, SPL-245954 UF memory utilization by splunk-winevtlog.exe increases until resources are exausted on Domain Controller
2024-03-12 SPL-245954, SPL-252444, SPL-252445, SPL-252446 UF memory utilization by splunk-winevtlog.exe increases until resources are exausted on Domain Controller


9.1.4

Version 9.1.4 was released on March 27, 2024. This release fixes the following universal forwarder issues. It also delivers relevant updates from the 2024-03-27 Security Advisories list.

Universal forwarder issues

Date resolved Issue number Description
2024-03-21 SPL-248587, SPL-252796, SPL-252797 Unable to install or upgrade to Splunk Universal Forwarder version 9.1.3
2024-02-23 SPL-251516, SPL-237849 CHECK_METHOD = modtime not working as expected in ver. 9.0.4 upgrading from 8.2.7.

9.1.3

Version 9.1.3 was released on January 22, 2024. This release fixes the following universal forwarder issues.

Universal forwarder issues

Date resolved Issue number Description
2023-11-09 SPL-246708, SPL-245467 Global OPENSSL_CONF Env caused pre-flight check failure during installation
2023-11-02 SPL-246545, SPL-245807 Splunk forwarder crashing on AIX when failed to connect to indexers
2023-10-27 SPL-246142, SPL-233334 Warnings "user splunk does not exist" observed while installing rpm builds for Universal Forwarder
2023-10-24 SPL-244414 Crashing in TcpOutEloop thread after upgrade from 9.1.x


9.1.2

Version 9.1.2 was released on November 16, 2023. This release fixes the following universal forwarder issues.

Universal forwarder issues

Date resolved Issue number Description
2023-11-03 SPL-245807, SPL-246456, SPL-246545, SPL-246546 Splunk AIX UF crashing when failed to connect to indexers
2023-10-24 SPL-244414 Crashing in TcpOutEloop thread after upgrade from 9.1.x


9.1.1

Version 9.1.1 was released on August 30, 2023. This release fixes the following universal forwarder issue.

Universal forwarder issues

Date resolved Issue number Description
2023-08-30 SPL-242093, SPL-242240 At upgrade, the Linux RPM/DEB installer creates a default "splunkfwd" account, causing issues when Splunk is already managed by another account
2023-08-08 SPL-240820, SPL-242100, SPL-242101, SPL-242102, SPL-242103 Windows EventLog splunk-winevtlog.exe modular input crashing during AD object resolution


9.1.0.1

Version 9.1.0.1 was released on July 6, 2023. This release introduces no changes to universal forwarder functionality. This release is provided only for version parity with Splunk Enterprise 9.1.0.1, which fixes the one issue described in Splunk Enterprise 9.1.0.1 fixed issues.

9.1.0

Version 9.1.0 was released on June 28, 2023. This release fixes the following universal forwarder issue.

Universal forwarder issues

Date resolved Issue number Description
2023-02-15 SPL-232028, SPL-236165, SPL-236166 Windows Defender logs stop being forwarded but other Winevent logs continue to forward until UF is restarted
Last modified on 16 September, 2024
Known issues   Third-party software

This documentation applies to the following versions of Splunk® Universal Forwarder: 9.1.5


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters