This is not current Splunk documentation.
Splunk 3.4.1 is the latest version. Only use this page with older Splunk 2.0.x.

Splunk Release Notes (Splunk v2.0)

Versions

Version 2.0.5 fixes several problems and adds a few minor enhancements.

A single regular expression statement in overlay-regex-props.xml can now create multiple extractions.
Users can change or remove portions of events (for example, remove all Social Security numbers from events) before they are indexed by configuring properties in overlay-props.xml and overlay-regex-props.xml. This previously required a custom processor.

Solaris shutdowns caused by splunkd exceeding Solaris' file handle limit have been eliminated.
Web sessions now time out after one hour instead of 10 minutes.
Saved Splunks may now include the ampersand (&) character.
Command-line errors on Solaris have been fixed.
Empty files are no longer classified as binary.
Files that begin with a newline are no longer automatically classified as binary.
The search interface now remains stable if splunkd goes down or gets shut down.
Toggling between Show and Hide Events by Time no longer resets the search.
When searching in a non-default index, the index:: search term now persists after refresh.
Resolved an error that caused Automatic Update Alerts not to be displayed.
Resolved several issues with typeahead in the search interface, including multiple highlighting of entries.
Mac OS X Splunk instances forwarding data will now continue to work after the receiving Splunk instance is stopped and restarted.
The search interface now renders better on Firefox.
The upload button now renders correctly on IE6.

No comments have been submitted.