• What's New
  • What's new in Splunk 3.4
    • New Splunk forwarder and light forwarder applications
    • New Splunk desktop application
    • Support for Vista
    • Support for 64-bit Windows
    • Receiving enabled in Splunk with a Free License
• Known Issues
  • Known Issues for release 3.4.1
    • General issues and considerations
    • Search issues, including deprecated commands
    • Splunk Web issues and considerations
    • Windows-specific considerations and known issues
    • Distributed search issues and considerations
    • Configuration considerations and issues
    • Splunk Toolbar considerations and issues
    • API considerations and issues
  • Workaround for SSL configuration for users of Firefox 3
    • Background
    • Symptoms
    • Workaround
• Changelogs by Version
  • 3.4
  • 3.4.1
• Credits
  • Credits
  • APSW
  • boost
  • elementree
  • expat
  • fpconst
  • gadfly
  • libarchive
  • libiconv
  • libxml2
  • libxslt
  • log4py
  • numeric
  • openLDAP
  • OpenSSL
  • pcre
  • popt1.7
  • pyopenssl
  • pysqlite
  • python
  • pyxml
  • SOAPppy 0.11.6
  • sqlite
  • twisted
  • xmlwrapp 0.5.0
  • zope
  • zlib

3.4

The following issues have been resolved in Splunk 3.4:

• An issue with indexing stopping when throttling does not release properly has been resolved. (SPL-17316)
• A minor issue with a Windows error displaying incorrect text has been resolved. (SPL-17281)
• Splunk will no longer crash if the WMI temporary cache is exceeded. (SPL-17233)
• DefaultQueueSize is now correctly set to 1000 events. (SPL-17167)
• A message is now logged in metrics.log when the tcpout queue is full. (SPL-17166)
• An issue with the instantiation of splunk-wmi.exe and splunk-regmon.exe has been resolved in the new light forwarder. (SPL-17079)
• A file descriptor leak has been resolved. (SPL-16976)
• An issue with mismatched checksums when using the deployment server has been resolved. (SPL-16899)
• The CLI delete command has been reinstated. (SPL-16896)
• Windows event log events from different hosts are now identified correctly. (SPL-16565)
• The sendEventMaxSize value is now correctly honored for file system change monitor. (SPL-16352)