• What's New
  • What's new in Splunk 3.2
    • Transaction search
    • Filesystem change monitoring
    • REST API
    • Windows platform support
    • Interactive event type learning
    • Interactive field extraction
    • Increased storage efficiency
    • Flexible roles
    • Auditing & signing
    • Transaction typing
    • New search features
    • Role-based search sharing
    • Live Tail
    • Dynamic event rendering
    • Universal field tagging
    • Pluggable authentication API
    • Event type templates
    • Asynchronous search via the CLI dispatch command
• Known Issues
  • Known Issues for release 3.2.1
    • General issues and considerations
    • Windows-specific considerations and known issues
    • Solaris-specific considerations and known issues
    • Search issues, including deprecated commands
    • Distributed search issues and considerations
    • Splunk Web issues and considerations
    • Configuration considerations and issues
    • Splunk Toolbar considerations and issues
  • Workaround for SSL configuration for users of Firefox 3
    • Background
    • Symptoms
    • Workaround
• Changelogs by Version
  • 3.2
    • Resolved issues from 3.1.5
  • 3.2.1
    • Resolved issues from 3.2
• Credits
  • Credits
  • APSW
  • boost
  • elementree
  • expat
  • fpconst
  • gadfly
  • libarchive
  • libiconv
  • libxml2
  • libxslt
  • log4py
  • numeric
  • openLDAP
  • OpenSSL
  • pcre
  • popt1.7
  • pyopenssl
  • pysqlite
  • python
  • pyxml
  • SOAPppy 0.11.6
  • sqlite
  • twisted
  • xmlwrapp 0.5.0
  • zope
  • zlib

3.2

This page contains a list of resolved issues from the last release of Splunk.

Resolved issues from 3.1.5

• All admin searches now work.
• HTTPS export of events using IE6 and IE7 is now supported.
• Issues with epoch time have been resolved.
• Splunk Web now supports all advanced search syntax, including reporting on the results of a subsearch, set operations, and more.
• Deployment class changes for deployment clients are now properly reflected on the Deployment server.
• IP restrictions made using BIND_SPLUNKIP are now correctly enforced.
• Distributed search with | multikv now works correctly.
• Show all now works correctly in distributed mode.
• Splunk now inserts line breaks into HTML mail alerts to work around potential line limit issues in some mail clients.
• Issues with search parsing linefeed characters incorrectly have been resolved.
• The link sent with alert results now specifies the correct time window.
• Alerts containing results from advanced reporting operators (such as top and timechart) now contain the complete result set.
• When using select, all data is now treated as numeric data and will be handled appropriately.
• Export as csv now correctly exports all data.
• An issue with a missing symlink in the Solaris x86 version of Splunk has been addressed.
• Splunk Web display issues with saving reports in IE6 have been resolved.
• Updating saved searches on the dashboard now updates the dashboard correctly.