Fixed issues

Splunk Enterprise 9.2.3 was released on September 12, 2024. This release includes fixes for the following issues.

Issues are listed in all relevant sections. Some issues might appear more than once.

Data input issues

Date resolved	Issue number	Description
2024-06-10	SPL-228117, SPL-257140	"file" is incorrectly listed as a supported scheme for ingest actions in outputs.conf.spec

Date resolved	Issue number	Description
2024-08-07	SPL-260318, SPL-259865	After upgrading to 9.2.2, some Indexers shows "NO Fully Searchable" status , which causes "search results might be incomplete with errors" in SH GUI
2024-05-30	SPL-256658, SPL-255517	Indexer Discovery deadlock during tcpout reload
2024-05-28	SPL-256435, SPL-256073	_internal index data not searchable -- a corruption fixup is in progress or has failed for a bucket

Date resolved	Issue number	Description
2024-06-28	SPL-248160, SPL-243155	The Monitoring Console does not show Indexer and Search Head statistics on the Overview page

Date resolved	Issue number	Description
2024-09-17	SPL-262047, SPL-257961	On Windows Splunk Enterprise Platform process instrument-resource-usage continuing growing its handles count for handle object Process.

Date resolved	Issue number	Description
2024-09-13	SPL-260479, SPL-257916	Windows-based Indexers (multiple in the IDX cluster) crashed in the ResourceUsage thread
2024-08-11	SPL-257916, SPL-260476, SPL-260477, SPL-260478, SPL-260479	Windows-based Indexers (multiple in the IDX cluster) crashed in the ResourceUsage thread
2024-07-02	SPL-258317, SPL-256878	null byte injection in admin handler based endpoints
2024-06-22	SPL-255323, SPL-258711, SPL-258712, SPL-258710	After an upgrade, Splunk Enterprise does not let you use TLS certificates that are located outside of the $SPLUNK_HOME directory