Splunk® Light

Release Notes

Download manual as PDF

Download topic as PDF

What's New in Splunk Light

For information about Splunk Light 7.2.5.1 see Fixed issues.

Splunk Light 7.2 includes the following new features. This release also includes improvements and enhancements from the related Splunk Enterprise 7.2 release.

For a full list of Splunk Light features see Splunk Light features in the Getting Started Manual.

Before proceeding, review the Known Issues for this release.

Splunk Light 7.2 was first released on October 2, 2018.

What's New in 7.2

New Feature or Enhancement Description
Workload management: search prioritization On Linux deployments, workload management enables prioritized provisioning of resource (CPU, memory) allocation for searches, in alignment with business priorities. It allows classification of searches into different resource groups, and then reserves a guaranteed amount of system resources (CPU, memory) per resource group regardless of the load on the system. See About workload management in the Splunk Enterprise Workload Management manual.
Ingest logs as metrics Ability to convert log data to metric data points at time of ingest. See Overview of log-to-metrics conversion in the Splunk Enterprise Metrics manual.
Ingest-time eval-style extractions You can apply the the eval command at data-ingest time, before data is indexed. All eval functions are now available for use when ingesting data into Splunk Light.
Customizable admin user name During installation, a user can specify a username for the default admin role. If a script is used and no username is provided, the user name "admin" is used.
Password expiration reminder Users are prompted to change their password as the expiration date for the password approaches.

What's New in 7.2.2

Splunk Enterprise 7.2.2 was released on December 19, 2018. It introduces enhancements to several features.

Enhancement Description
Workload management: search prioritization Improved usability and error handling in workload management. This provides a useful analysis on any misconfigurations that could affect the setup and functioning of workload management in Splunkd deployments. See Configure workload management in the Splunk Enterprise Workload Management manual.
systemd support Added systemd as a supported system and service manager for Linux. This allows systemd to be used for managing Splunk software processes, in addition to the existing init daemon(initd), for supported Linux operating system distributions. See Run Splunk Enterprise as a systemd service in the Splunk Enterprise Admin Manual.
Improvements to counter metrics Additional support for counter metrics. For more information see Time functions in the Search Reference and Investigate counter metrics in the Splunk Enterprise Metrics manual.
RC4 secret rotation Admin users can use the command-line interface or REST API to generate a new splunk.secret and re-encrypt existing RC4 secrets using AES-GCM. See the section "Update the splunk.secret key file on instances to use the new cipher" in Configure secure communications between Splunk instances with updated cipher suite and message authentication code in the Splunk Enterprise Securing Splunk Enterprise manual.
  NEXT
Known issues in Splunk Light

This documentation applies to the following versions of Splunk® Light: 7.2.2, 7.2.3, 7.2.4, 7.2.5, 7.2.6


Was this documentation topic helpful?

Enter your email address, and someone from the documentation team will respond to you:

Please provide your comments here. Ask a question or make a suggestion.

You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters