Fixed issues

The following issues were fixed in releases of the universal forwarder.

9.4.1

Version 9.4.1 was released on February 26, 2025. This release fixes the following universal forwarder issues:

Date resolved	Issue number	Description
2024-11-20	SPL-265908, SPL-254532	UF 9.1.2 Windows Security events stop forwarding when Windows event log service is restarted
2024-11-19	SPL-265068, SPL-266372, SPL-266374, SPL-266375, SPL-266377	UF Windows installer re-grant user privileges during upgrade
2024-11-06	SPL-265633, SPL-265630	Windows Universal Forwarder high cpu where Splunk user does not have read access to all of the files in the monitored directory
2024-11-06	SPL-259202, SPL-265630	Windows Universal Forwarder high cpu where Splunk user does not have read access to all of the files in the monitored directory

If no issues are shown, there are no new Universal Forwarder specific fixes to highlight in this version.

Version 9.4.0 was released on December 16, 2024. This release fixes the following universal forwarder issues:

Date resolved	Issue number	Description
2025-03-12	SPL-248479, SPL-253092	Forwarders enter a state of constant blocking, and Splunk Cloud indexers may fail to process events. This can result in the events being sent to a non-searchable queue, the Dead Letter Queue (DLQ), due to a Persistent Queue issue with the S2S protocol

If no issues are shown, there are no new Universal Forwarder specific fixes to highlight in this version.