Fixed issues
Splunk Enterprise 7.0.5 was released on July 27, 2018.
Issues are listed in all relevant sections. Some issues might appear more than once. To check for additional security issues related to this release, visit the Splunk Security Portal.
Highlighted issues
Date resolved
|
Issue number
|
Description
|
2018-07-13 |
SPL-156440, SPL-146352 |
LDAP reload can severely delay remote app deployment, need app reload metrics to improve diagnosability.
|
2018-06-20 |
SPL-155053, SPL-152556 |
fill_summary_index.py fails in SHC environment
|
Authentication and authorization issues
Date resolved
|
Issue number
|
Description
|
2019-09-18 |
SPL-149313, SPL-148551 |
srchFilter term not included in search when calculated field of same name exists
|
2018-06-29 |
SPL-155318, SPL-149332 |
SAML - Upon Login Failure all current roles being sent is displayed to user in error message
|
Data input issues
Date resolved
|
Issue number
|
Description
|
2018-07-20 |
SPL-156315, SPL-157319, SPL-157522, SPL-157595 |
After upgrade to 7.x, HEC events greater than 512KB are dropped with parsing errors, resulting in degrade of indexing throughput
|
2018-06-20 |
SPL-155069, SPL-153591 |
high delay on events from UF after upgrade to (6.6.x)
|
Search issues
Date resolved
|
Issue number
|
Description
|
2018-07-12 |
SPL-154532, SPL-152434 |
xml export bloats in size due to repeated <fieldOrder> section
|
2018-07-10 |
SPL-148858, SPL-148547 |
REGEX eval replace() does not work correctly (overly greedy)
|
2018-06-20 |
SPL-155294, SPL-154026 |
gentimes command shows incorrect starthuman time with daylight savings
|
2018-06-19 |
SPL-155412, SPL-155106 |
splunkd process consuming large amount of memory
|
2018-06-01 |
SPL-152809, SPL-141639 |
6.5.2 Error in chart command: The value for option span is invalid: log10
|
2018-05-31 |
SPL-154970, SPL-153432 |
The bins option returns inconsistent count values in distributed environment
|
2018-05-11 |
SPL-152493, SPL-148796 |
ui_inactivity_timeout not working even after search completes
|
Saved search, alerting, scheduling, and job management issues
Date resolved
|
Issue number
|
Description
|
2018-07-10 |
SPL-154405, SPL-147319 |
SHC AuthenticationManagerLDAP complains "Could not find user="system"" flooding splunkd.log
|
2018-05-20 |
SPL-154302, SPL-153349 |
Scheduling Alerts - Apply Time Range Of Initial Search Not Reflecting when Saving as Alert
|
Data model and pivot issues
Date resolved
|
Issue number
|
Description
|
2018-07-10 |
SPL-154405, SPL-147319 |
SHC AuthenticationManagerLDAP complains "Could not find user="system"" flooding splunkd.log
|
Indexer and indexer clustering issues
Date resolved
|
Issue number
|
Description
|
2018-07-24 |
SPL-154986, SPL-155130, SPL-155215, SPL-155220, SPL-157832 |
single-copy bucket stuck with status "no possible primaries", causes entire cluster to be tagged as "not fully searchable"
|
2018-07-10 |
SPL-156785, SPL-146688 |
Race condition in Indexer Cluster bundles dry run causing "Unable to create/replace target file: No such file or directory".
|
2018-07-04 |
SPL-155702, SPL-153569 |
Data rebalance blocked by stuck bucket discard
|
2018-06-22 |
SPL-154353, SPL-146575 |
RF and SF not being met on CM after adding new Indexes and rolling restart
|
2018-06-08 |
SPL-154647, SPL-152465 |
Clustering - when a peer is in detention, we will make excess copies
|
2018-05-23 |
SPL-153520, SPL-153121 |
CMSlave Should output errors when failing to enqueue the bundle validate job
|
Distributed search and search head clustering issues
Date resolved
|
Issue number
|
Description
|
2018-07-14 |
SPL-154829, SPL-141363 |
Indexers report "Unknown search command" for external search commands even though the indexers contain the search bundle with the external command
|
2018-07-13 |
SPL-155355, SPL-154419 |
SHC captain does not clean up local bundles after failed replication attempts
|
2018-07-13 |
SPL-156440, SPL-146352 |
LDAP reload can severely delay remote app deployment, need app reload metrics to improve diagnosability.
|
2018-07-13 |
SPL-156424, SPL-155536 |
prolonged gaps in SHC captain metrics.log group=searchscheduler
|
2018-07-09 |
SPL-154617, SPL-152935 |
KVStore Replication Error: replSetReconfig got BadValue _id field value of 256 is out of range
|
2018-07-04 |
SPL-156178, SPL-151900 |
Distsearch.conf: value specified in disabled_server property will get ignored, if same value exists in servers property
|
2018-07-04 |
SPL-155641, SPL-154870 |
BundleDeltaHandler failing on indexing_tokens directory
|
2018-07-03 |
SPL-154032, SPL-154067, SPL-154926, SPL-156192 |
SHC bundle rejected at push-time because of built-in apps warning is still created and picked up by SHC members
|
2018-06-22 |
SPL-155634, SPL-154654 |
SHC captain stops delegating DMA searches after a delegated DMA search job fails (status=delegated_remote_completion, success=0).
|
2018-06-22 |
SPL-155808, SPL-154402 |
SHC: alert suppression may fail during restart due to timing issues
|
2018-06-20 |
SPL-155203, SPL-146262 |
HTTP server thread blocked for ever without logging during shutdown
|
2018-05-09 |
SPL-153832, SPL-148106 |
Crashing thread: TcpChannelThread, Assertion `_slave != __null ClusteringMgr::_slave_writeBucketsToSearch.
|
Distributed deployment, forwarder, deployment server issues
Date resolved
|
Issue number
|
Description
|
2018-07-10 |
SPL-156354, SPL-149328 |
Deployment Clients unable to connect to Deployment Server with phoneHomeIntervalInSecs = 600
|
2018-06-03 |
SPL-155010, SPL-153261 |
Slow Performance in the Deployment Server UI and sometime crash the browser
|
2018-05-09 |
SPL-154007, SPL-148851 |
Application bundle cache (by default under $SPLUNK_HOME/var/run/tmp/) *never* gets cleaned up on Deployment server even server class no longer exists
|
Monitoring Console issues
Date resolved
|
Issue number
|
Description
|
2018-05-15 |
SPL-153767, SPL-138918 |
Mount points are not listed correctly in "Average I/O Usage and Performance" panel of Monitoring Console
|
Splunk Web and interface issues
Date resolved
|
Issue number
|
Description
|
2018-07-16 |
SPL-157126, SPL-156282 |
Wrong description in lookup definition in UI
|
2018-06-20 |
SPL-155294, SPL-154026 |
gentimes command shows incorrect starthuman time with daylight savings
|
2018-06-20 |
SPL-155338, SPL-153658 |
UI Visualizations of wide lists are not rendered correctly.
|
2018-05-28 |
SPL-153995, SPL-147061 |
debug/refresh reports errors on vanilla install
|
2018-05-11 |
SPL-152493, SPL-148796 |
ui_inactivity_timeout not working even after search completes
|
REST, Simple XML, and Advanced XML issues
Date resolved
|
Issue number
|
Description
|
2018-06-25 |
SPL-154837, SPL-153655 |
/services/search/jobs/*/results is responding with duplicate JSON field 'init_offset' when output_mode is 'json_cols' and search has no result
|
2018-06-20 |
SPL-155053, SPL-152556 |
fill_summary_index.py fails in SHC environment
|
PDF issues
Date resolved
|
Issue number
|
Description
|
2018-06-27 |
SPL-154368, SPL-153668 |
When exporting to PDF one particular IP Address generates an error while others work
|
Admin and CLI issues
Date resolved
|
Issue number
|
Description
|
2018-06-20 |
SPL-155191, SPL-154589 |
Enabling splunk boot-start won't work with ubuntu-like distro
|
2018-06-17 |
SPL-155554, SPL-146439 |
Saving roles manager page when no indexes are listed remove previous indexes
|
2018-06-15 |
SPL-153624, SPL-154857, SPL-155429 |
savedsearches.conf configuration is_visible needs clarification
|
2018-06-12 |
SPL-153625, SPL-154021, SPL-154022 |
leading and trailing comma validation should be robust for http proxy configuration
|
Uncategorized issues
Date resolved
|
Issue number
|
Description
|
2019-01-28 |
SPL-155427, SPL-155716, SPL-155719 |
CIM Setup page is showing single line because of Indexes.js collection not executing callbacks
|
2018-07-16 |
SPL-156541, SPL-147803 |
License master rollovers stopped by a broken syslog output blocking indexing, need better logging for diagnosability.
|
2018-07-15 |
SPL-153174, SPL-156193, SPL-156899 |
Request for better messaging for "Duplicated License situation happen on peer ..."
|
2018-07-03 |
SPL-155035, SPL-156539, SPL-155351 |
Splunk Fowarders splunkd process stopping - Crashing thread: HttpClientPollingThread
|
2018-06-14 |
SPL-155224, SPL-153036 |
CMBucketId has lock contention from std::map log(n) lookup time
|
2018-06-14 |
SPL-152888, SPL-154243, SPL-155000, SPL-155019, SPL-155451 |
Chunks of summary index data are routed to the wrong index when queues are blocked
|
2018-06-11 |
SPL-154062, SPL-154018 |
Splunkd looks for default openssl cert file under build path
|
2018-05-28 |
SPL-154366, SPL-152887 |
Color Range Feature coupled with real-time search causes the colors to flicker when updating
|
2018-05-25 |
SPL-154014, SPL-145371 |
Bulletin board message timestamp incorrect on SHC members
|
2018-05-09 |
SPL-153935, SPL-151228 |
Add suppression state file listing to splunk diag.
|
2018-05-04 |
SPL-154129, SPL-153011 |
HTML entity name appears in Tour dialog if username contains &,<,>,",'
|
Feedback submitted, thanks!