Splunk® Enterprise

Release Notes

This documentation does not apply to the most recent version of Splunk® Enterprise. For documentation on the most recent version, go to the latest release.

Fixed issues

Splunk Enterprise 9.2.3 was released on September 12, 2024. This release includes fixes for the following issues.

Issues are listed in all relevant sections. Some issues might appear more than once.

Data input issues

Date resolved Issue number Description
2024-06-10 SPL-228117, SPL-257140 "file" is incorrectly listed as a supported scheme for ingest actions in outputs.conf.spec

Indexer and indexer clustering issues

Date resolved Issue number Description
2024-08-07 SPL-260318, SPL-259865 After upgrading to 9.2.2, some Indexers shows "NO Fully Searchable" status , which causes "search results might be incomplete with errors" in SH GUI
2024-05-30 SPL-256658, SPL-255517 Indexer Discovery deadlock during tcpout reload
2024-05-28 SPL-256435, SPL-256073 _internal index data not searchable -- a corruption fixup is in progress or has failed for a bucket

Monitoring Console issues

Date resolved Issue number Description
2024-06-28 SPL-248160, SPL-243155 The Monitoring Console does not show Indexer and Search Head statistics on the Overview page

Uncategorized issues

Date resolved Issue number Description
2024-08-11 SPL-257916, SPL-260479, SPL-260476, SPL-260477, SPL-260478 Windows-based Indexers (multiple in the IDX cluster) crashed in the ResourceUsage thread
2024-07-02 SPL-258317, SPL-256878 null byte injection in admin handler based endpoints
Last modified on 11 September, 2024
Field alias behavior change   Deprecated and removed in version 9.2

This documentation applies to the following versions of Splunk® Enterprise: 9.2.3


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters