Splunk Enterprise version 7.3 is no longer supported as of October 22, 2021. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise.
For documentation on the most recent version, go to the latest release.
Fixed issues
Splunk Enterprise 7.3.9 was released on February 24, 2021. This release includes fixes for the following issues.
Issues are listed in all relevant sections. Some issues might appear more than once. To check for additional security issues related to this release, visit the Splunk Security Portal.
Upgrade issues
| Date resolved | Issue number | Description |
|---|---|---|
| 2020-12-11 | SPL-196933, SPL-197989, SPL-198236, SPL-198237 | Settings removed from savedsearches.conf after upgrading from 7.3.3 to 7.3.7.1 |
Search issues
| Date resolved | Issue number | Description |
|---|---|---|
| 2021-02-10 | SPL-198239, SPL-198094 | srchTimeWin not effective if earliest= is used in query |
Admin and CLI issues
| Date resolved | Issue number | Description |
|---|---|---|
| 2020-12-11 | SPL-196933, SPL-197989, SPL-198236, SPL-198237 | Settings removed from savedsearches.conf after upgrading from 7.3.3 to 7.3.7.1 |
Last modified on 24 February, 2021
| Timestamp recognition of dates with two-digit years fails beginning January 1, 2020 | Deprecated and removed in version 7.3 |
This documentation applies to the following versions of Splunk® Enterprise: 7.3.9
Download manual
Feedback submitted, thanks!