Splunk Stream

Release Notes

This documentation does not apply to the most recent version of Splunk Stream. For documentation on the most recent version, go to the latest release.

Fixed Issues

Fixed issues in Splunk App for Stream 6.4.0:

Defect number Description
STREAM-2396 Problems with "required_by" validation handling when attempting to delete streams in Configure Streams UI.
STREAM-2367 Incorrect CIM mapping for DHCP data.
STREAM-2285 streamfwd does not keep track of bytes/events count.
STREAM-2277 Back button does not show warning for unsaved changes. This can cause you to lose edits when modifying a stream.
STREAM-2268 imap "password" field is missing.
STREAM-2262 Aggregated streams don't emit "endtime field.
STREAM-2259 Saving stream with addToDefaultGroup=false fails.
STREAM-2230 Stream events are not accurately timestamped.
STREAM-2229 DNS query types do not resolve to their respective names.
STREAM-2222 Stream tries to open pcap adapter on inactive interface.
STREAM-2193 The stream id (labeled 'Name' in the Configure Streams UI) is case sensitive. This lets you create a stream with the same name as a default stream, for example, id "HTTP", which you can confuse with the default stream id "http."
STREAM-2183 request_time, reply_time, and response_time flow metrics are not populated for all protocols.
STREAM-2179 Sparkline in Configure Streams UI under certain circumstances incorrectly shows zero traffic volume for protocols.
STREAM-2169 SSL key stored in local/directory.
STREAM-2156 streamfwd process may exhibit unbounded memory growth when running on Splunk Universal Forwarder instance that is unable to forward events, most commonly because of incorrect tcpout parameters in outputs.conf configuration.
STREAM-2097 The default bitrate is unlimited when reading pcap files from the command line. This causes "Event Queue Overlow" errors if the pcap file contains more than 10,000 events (the MaxEventQueue size).
STREAM-2089 When modifying the regex rule for an existing Distributed Forwarder Management (DFM) group, the DFM UI does not update properly.
STREAM-2063 Improper validation of IP Address List.
STREAM-2018 When editing an ephemeral stream configuration from the command line, there is no validation to ensure createDate is earlier than expireDate.
STREAM-2014 Network Metrics dashboard shows incorrect bandwidth values.
STREAM-2011 Configure Streams page headers do not display correctly in Splunk Enterprise version 6.3. Workaround: Upgrade Splunk App for Stream to version 6.4.0 or later.
STREAM-1956 When Stream Examples App is installed with Splunk App for Stream, switching between "Estimate" (Stat only) mode and "Enable" mode opens the wrong modal.
STREAM-1873 Some SMB events trigger off the MaxEventAttributes stop limit, which causes repetitive attributes/multiple events to pile up in SMB protocol events.
STREAM-1848 Typo in error message that appears when cloning a stream with a duplicate ID of the existing protocol.
STREAM-1834 Inefficient captured packet queueing.
Last modified on 13 November, 2015
Known issues   New features

This documentation applies to the following versions of Splunk Stream: 6.4.0


Was this topic useful?







You must be logged into splunk.com in order to post comments. Log in now.

Please try to keep this discussion focused on the content covered in this documentation topic. If you have a more general question about Splunk functionality or are experiencing a difficulty with Splunk, consider posting a question to Splunkbase Answers.

0 out of 1000 Characters