This is not current Splunk documentation.
Splunk 3.4.2 is the latest version. Only use this page with older Splunk 2.0.x.

« Previous | Table of Contents | Next »

Splunk Release Notes (Splunk v2.0)

Versions

Version 1.1

Version 1.1 updates many features—Live Splunks, search history, syslog event processing, multiple index support, file export—with improvements suggested by customers. Our online Splunk Base service has been significantly expanded, too.

In the process we've also reduced the index size for both Splunk Server and Splunk Professional from 3x to 1.2x that of the raw data, and boosted index performance.

User Interface & Search

Splunk command line tool lets you perform searches from a Unix shell or from within a script.
Personal user histories on Splunk Professional can be searched by user. Searches in the history can be re-run by clicking on them.
Export filenames for search results include identifying info about their contents in the filename.
Many subtle UI improvements make the splunkSearch browser interface more intuitive.

Indexing

Index size reduced from 3x to 1.2x the size of the data indexed.
Index performance increased.
Syslog events identify the originating host for remote events.

Splunk Base

Source Types are associated with event types.
Check splunk.com no longer requires users to upload their data to Splunk Base to look up tags and descriptions for specific event types.
The Anonymizer has an improved UI and greater flexibility.
SplunkBin handles multi-line events in data samples.
Tags can be edited at Splunk Base as well as locally.
Users can subscribe to notifications about updated event type info.
Export function lets users export Splunk Base entries by tag, user, or source type.
User profile pages include links to contributions and optional personal info.

Splunk Sync

Support for Solaris, SuSE and other Linux distros improved.

Administration

Server-side commands include splunk test and splunk restore for troubleshooting.
Indexing statistics are displayed in more detail.
Live Splunk notifications pass search results and other parameters to the notification script.
New anonymizer command-line tool replaces usernames, IP addresses and other identifying info in event samples to protect privacy and security in shared data.
Export / Import tool migrates event type and source type information between Splunk installations.

Installation & Configuration

Improved installer program has fewer steps and automates more of configuration.