Fixed issues

Splunk Enterprise 8.0.0 was released on October 22, 2019. This release includes fixes for the following issues.

Issues are listed in all relevant sections. Some issues might appear more than once. To check for additional security issues related to this release, visit the Splunk Security Portal.

Search issues

Date resolved	Issue number	Description
2019-09-13	SPL-176244, SPL-176023	Lookup wildcards cannot match empty string
2019-09-03	SPL-169524, SPL-164107	the mstats rate(x) function does not work in real-time search
2019-04-30	SPL-164107, SPL-169524	the mstats rate(x) function does not work with wildcards in the enhanced syntax

Saved search, alerting, scheduling, and job management issues

Date resolved	Issue number	Description
2019-08-06	SPL-162249, SPL-170857, SPL-177527, SPL-177529, SPL-183262	The filter function of <splunk-search-dropdown> UI component is not working on on Splunk Enterprise 7.1 and later.
2019-07-24	SPL-172787, SPL-171073	SHC Stop Executing DMA Searches
2019-07-08	SPL-171713, SPL-171850, SPL-172838, SPL-174080	Search Parser does not fail on tstats w/ complex where clause
2019-04-08	SPL-167291, SPL-136608	Users don't have capability "accelerate_search", can not access accelerated reports

Charting, reporting, and visualization issues

Date resolved	Issue number	Description
2019-04-09	SPL-167850, SPL-164920	Dashboard issue: Multiselect URL retains single value after Hide Filters selected

Data model and pivot issues

Date resolved	Issue number	Description
2019-08-06	SPL-162249, SPL-170857, SPL-177527, SPL-177529, SPL-183262	The filter function of <splunk-search-dropdown> UI component is not working on on Splunk Enterprise 7.1 and later.
2019-07-24	SPL-172787, SPL-171073	SHC Stop Executing DMA Searches
2019-07-08	SPL-171713, SPL-171850, SPL-172838, SPL-174080	Search Parser does not fail on tstats w/ complex where clause
2019-04-08	SPL-167291, SPL-136608	Users don't have capability "accelerate_search", can not access accelerated reports

Indexer and indexer clustering issues

Date resolved	Issue number	Description
2019-05-22	SPL-167708, SPL-170943, SPL-170937, SPL-170938	Apply cluster bundle does not apply bundle to any indexers which are in progress of adding to cluster

Distributed search and search head clustering issues

Date resolved	Issue number	Description
2019-08-15	SPL-173620, SPL-145260	UI: Jobs Manager page still displaying supposedly deleted job
2019-07-24	SPL-172787, SPL-171073	SHC Stop Executing DMA Searches

Data Fabric Search issues

Date resolved	Issue number	Description
2019-09-09	SPL-167574	In federated searches, a DFS search may remain in the parsing stage if the remote job is in aqueued status because the disk quota has been reached.
2019-08-27	SPL-174032	Concurrent searches are not supported in non-clustered search head deployments if the search heads have a common Spark cluster.

Splunk Web and interface issues

Date resolved	Issue number	Description
2019-08-06	SPL-162249, SPL-170857, SPL-177527, SPL-177529, SPL-183262	The filter function of <splunk-search-dropdown> UI component is not working on on Splunk Enterprise 7.1 and later.

Windows-specific issues

Date resolved	Issue number	Description
2019-09-03	SPL-171491	$SplunkStanzaName value is not set in PowerShell script
2019-04-29	SPL-155603, SPL-155149	Registry changes under SYSTEM\CurrentControlSet are not being read by WinRegMon

Authentication and authorization issues

Date resolved	Issue number	Description
2019-08-20	SPL-164557, SPL-175202	Add capability of skewing time validation for SAML assertions
2019-02-27	SPL-166025, SPL-154382	Role Capability To See Indexes for Summary Indexing Gives Role Index Edit Ability

PDF issues

Date resolved	Issue number	Description
2019-08-23	SPL-170982, SPL-175902, SPL-175903	Can not export pdf from dashboard when using wider time range
2019-06-10	SPL-169899, SPL-169847	Configure Splunk to refuse to send 0 size attachments when an alert or report contains no results

Uncategorized issues

Date resolved	Issue number	Description
2019-07-02	SPL-170855, SPL-170282	S3Client shows statusCode=403 with a wrong access_key when multiple on-prem remote storages are configured
2019-07-02	SPL-170421, SPL-169562	EXTRACT with REGEX capture groups are not extracting fields without specifying FORMAT
2019-06-26	SPL-172431, SPL-172417	Entries for `coldToFrozenDir` and `coldToFrozenScript` in indexes.conf.spec incorrectly state that the settings are not available for remote storage enabled indexes.
2019-03-11	SPL-167178, SPL-164859	Error in 'summaryindex' command: You have insufficient privileges to run this command.
2019-03-05	SPL-162510, SPL-168818, SPL-169239	Memory Exhaustion causes LMTracker to stay in INFLIGHT state permenantly