Fixed Issues
Fixed issues in Splunk App for Stream 6.4.0:
Defect number | Description |
---|---|
STREAM-2396 | Problems with "required_by" validation handling when attempting to delete streams in Configure Streams UI. |
STREAM-2367 | Incorrect CIM mapping for DHCP data. |
STREAM-2285 | streamfwd does not keep track of bytes/events count.
|
STREAM-2277 | Back button does not show warning for unsaved changes. This can cause you to lose edits when modifying a stream. |
STREAM-2268 | imap "password" field is missing. |
STREAM-2262 | Aggregated streams don't emit "endtime field. |
STREAM-2259 | Saving stream with addToDefaultGroup=false fails. |
STREAM-2230 | Stream events are not accurately timestamped. |
STREAM-2229 | DNS query types do not resolve to their respective names. |
STREAM-2222 | Stream tries to open pcap adapter on inactive interface. |
STREAM-2193 | The stream id (labeled 'Name' in the Configure Streams UI) is case sensitive. This lets you create a stream with the same name as a default stream, for example, id "HTTP", which you can confuse with the default stream id "http." |
STREAM-2183 | request_time, reply_time, and response_time flow metrics are not populated for all protocols. |
STREAM-2179 | Sparkline in Configure Streams UI under certain circumstances incorrectly shows zero traffic volume for protocols. |
STREAM-2169 | SSL key stored in local/directory. |
STREAM-2156 | streamfwd process may exhibit unbounded memory growth when running on Splunk Universal Forwarder instance that is unable to forward events, most commonly because of incorrect tcpout parameters in outputs.conf configuration.
|
STREAM-2097 | The default bitrate is unlimited when reading pcap files from the command line. This causes "Event Queue Overlow" errors if the pcap file contains more than 10,000 events (the MaxEventQueue size). |
STREAM-2089 | When modifying the regex rule for an existing Distributed Forwarder Management (DFM) group, the DFM UI does not update properly. |
STREAM-2063 | Improper validation of IP Address List. |
STREAM-2018 | When editing an ephemeral stream configuration from the command line, there is no validation to ensure createDate is earlier than expireDate. |
STREAM-2014 | Network Metrics dashboard shows incorrect bandwidth values. |
STREAM-2011 | Configure Streams page headers do not display correctly in Splunk Enterprise version 6.3. Workaround: Upgrade Splunk App for Stream to version 6.4.0 or later. |
STREAM-1956 | When Stream Examples App is installed with Splunk App for Stream, switching between "Estimate" (Stat only) mode and "Enable" mode opens the wrong modal. |
STREAM-1873 | Some SMB events trigger off the MaxEventAttributes stop limit, which causes repetitive attributes/multiple events to pile up in SMB protocol events. |
STREAM-1848 | Typo in error message that appears when cloning a stream with a duplicate ID of the existing protocol. |
STREAM-1834 | Inefficient captured packet queueing. |
Known issues | New features |
This documentation applies to the following versions of Splunk Stream™: 6.4.0
Feedback submitted, thanks!