Fixed issues

Splunk Enterprise 9.1.4 was released on March 27, 2024. This release includes fixes for the following issues. It also delivers relevant updates from the 2024-03-27 Security Advisories list.

Issues are listed in all relevant sections. Some issues might appear more than once.

Data input issues

Date resolved	Issue number	Description
2024-02-29	SPL-251748, SPL-249543	TcpInputProcessor not able to drain splunktcpin queue during graceful shutdown
2024-02-28	SPL-249543, SPL-251748, SPL-251749, SPL-253929, SPL-251746, SPL-253927, SPL-253928	TcpInputProcessor not able to drain splunktcpin queue during graceful shutdown.
2024-02-21	SPL-251249, SPL-241076	Metrics event can be indexed in default event index when mcollect is used.
2024-01-17	SPL-249423, SPL-249409	Splunk UF (windows) huge amount of duplicating logs due to re-reading log file after Upgrade to 9.1.0.1

Charting, reporting, and visualization issues

Date resolved	Issue number	Description
2024-02-13	SPL-249095, SPL-247587	After upgrading to 9.1.1 dashboards iframe panels load to a blank page

Indexer and indexer clustering issues

Date resolved	Issue number	Description
2024-02-29	SPL-251748, SPL-249543	TcpInputProcessor not able to drain splunktcpin queue during graceful shutdown
2024-02-28	SPL-249543, SPL-251748, SPL-251749, SPL-253929, SPL-251746, SPL-253927, SPL-253928	TcpInputProcessor not able to drain splunktcpin queue during graceful shutdown.

Universal forwarder issues

Date resolved	Issue number	Description
2024-03-21	SPL-248587, SPL-252796, SPL-252797	Unable to install or upgrade to Splunk Universal Forwarder version 9.1.3
2024-02-23	SPL-251516, SPL-237849	CHECK_METHOD = modtime not working as expected in ver. 9.0.4 upgrading from 8.2.7.