Splunk® Enterprise

Release Notes

Download manual as PDF

Splunk Enterprise version 5.0 reached its End of Life on December 1, 2017. Please see the migration information.
This documentation does not apply to the most recent version of Splunk. Click here for the latest version.
Download topic as PDF

Deprecated features

Platform support

  • Splunk platform support: Starting in Splunk 5.0, supported platforms for Splunk will be identified as either Enterprise, Free/Trial, or Universal Forwarder.
    • Enterprise: Full Splunk features and functions.
    • Free/Trial: May be downloaded for demo and free use. May not support all features and functions.
    • Universal Forwarder: Platforms that support the Splunk universal forwarder.

Platforms deprecated

  • Windows Vista x86 & x86_64: Enterprise support for Windows Vista x86 & x86_64 is deprecated, and might be removed entirely in a future release. Free/Trial & Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
  • Windows XP x86 & x86_64: Enterprise and Free/Trial support for Windows XP x86 & x86_64 is deprecated, and might be removed entirely in a future release. Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
  • Solaris 8 SPARC: Enterprise & Free/Trial support for Solaris 8 SPARC is deprecated, and might be removed entirely in a future release. Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
  • Solaris 9 x86, x86_64, & SPARC: Enterprise & Free/Trial support for Solaris 9 x86, x86_64, & SPARC is deprecated, and might be removed entirely in a future release. Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
  • FreeBSD 6.x x86 & x86_64: Universal Forwarder support for FreeBSD 6.x x86 & x86_64 is deprecated, and might be removed entirely in a future release. FreeBSD 7.x and 8.x remain generally available in 5.0 and there are currently no plans to reduce support.
  • Linux Kernel 2.4 x86: Enterprise & Free/Trial support for Linux Kernel 2.4 x86 is deprecated, and might be removed entirely in a future release. Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
  • Mac OS X Leopard (10.5): Enterprise, Free/Trial, & Universal Forwarder support for Mac OS X Leopard (10.5) is deprecated, and might be removed entirely in a future release.
  • Mac OS X Snow Leopard (10.6): Enterprise support for Mac OS X Snow Leopard (10.6) is deprecated, and might be removed entirely in a future release. Free/Trial & Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
  • AIX 5.2: Universal Forwarder support for AIX 5.2 is deprecated, and might be removed entirely in a future release. AIX 5.3 and 6.1 Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.
  • AIX 5.3: Enterprise and Free/Trial support for AIX 5.3 are deprecated, and might be removed entirely in a future release. The Universal Forwarder package for AIX 5.3 remains generally available in 5.0 and there are currently no plans to reduce support.
  • HP-UX 11i v2 & v3 for PA-RISC: Enterprise & Free/Trial support for HP-UX 11i v2 & v3 for PA-RISC is deprecated, and might be removed entirely in a future release. Universal Forwarder packages remain generally available in 5.0 and there are currently no plans to reduce support.

Platforms removed

  • FreeBSD 6.x x86 & x86_64: Enterprise and Free/Trial support for FreeBSD 6.x is removed.
  • AIX 5.2: Enterprise and Free/Trial support for AIX 5.2 is removed.

Feature support

The following features have been deprecated or removed from Splunk version 5.0:

Features deprecated

  • Saved searches used within event types: This feature is deprecated and might be removed in a future release.
  • Event type auto-discovery: This feature is deprecated and might be removed in a future release.
  • Round-robin load balancing: This feature was deprecated in Splunk 4.2. Automatic load balancing is now the default.
  • Distributed block signing and event hashing: This feature is deprecated and might be removed in a future release.
  • CHECK_FOR_HEADER props.conf attribute (for index-time field extractions): This feature is deprecated and might be removed in a future release.
  • entity.setEntity Python SDK function: This feature is deprecated and might be removed in a future release.
  • Splunk modules: The following Splunk modules (elements of a view or dashboard) have been deprecated and might be removed in a future release:
    • AdvanceModeToggle
    • AjaxInclude
    • AsciiTimeline
    • CakeBrushFormatter
    • ConvertToRedirect
    • DistributedSearchServerChooser
    • HiddenIntention
    • IndexesSizes
    • MultiplexSparkline
    • PostProcessBar
    • SavedSearches
    • Segmentation
    • SimpleEventsView

Features removed

  • Multicast search peer discovery: Explicit peer configuration with SSL security replaces this feature. The following settings in distsearch.conf have been removed:
    • heartbeatMcastAddr
    • heartbeatPort
    • ttl
    • heartbeatFrequency
  • HTTP out monitor: This feature has been removed from the product, and no alternative exists for it.

Deprecated features and platforms will continue to work and Splunk will support them through the 5.0.x lifecycle. However, customers should begin planning now for the future removal of these features from the supported set of products.

PREVIOUS
5.0.1
  NEXT
Credits

This documentation applies to the following versions of Splunk® Enterprise: 5.0, 5.0.1, 5.0.2, 5.0.3, 5.0.4, 5.0.5, 5.0.6, 5.0.7, 5.0.8, 5.0.9, 5.0.10, 5.0.11, 5.0.12, 5.0.13, 5.0.14, 5.0.15, 5.0.16, 5.0.17, 5.0.18


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters