Workaround for Registry monitoring configuration issue
Note: The bug that this workaround addresses was resolved in version 4.3.1 of Splunk.
In Splunk 4.3, the defaults for Registry monitoring have been migrated into the Windows app. If you have Registry monitoring enabled in 4.2, this means you might experience some changes in behavior as these defaults are no longer present to back your local settings.
How to fix the problem
There are two ways to fix this problem:
1. Install the current version of the Splunk for Windows app into your 4.3 instance. This will provide the default configurations.
2. Add the following lines to
[default] #workaround for regmon migration proc = .* type = rename|set|delete|create hive = .*
Note that adding these values here overrides system defaults that may change in the future.
Workaround for SSL configuration for users of Firefox 3
This documentation applies to the following versions of Splunk® Enterprise: 4.3