Release Notes: Both Splunk Professional and the free Splunk Server can be installed in any directory without the need for an /opt/splunk directory or link. The FIFO input processor now reads information continuously. Several other minor bugfixes were made, including a heisenbug that was causing miscellaneous segfaults.
Release Notes: All ports can be now be set during installation. Users can set a database location during installation. Solaris search core dump has been fixed. Hostregex extraction is now working. Fifo input processors are now working, and there are other minor bugfixes.
Release Notes: This release updates many features -- Live Splunks, search history, syslog event processing, multiple index support, and file export -- with improvements suggested by customers. The online Splunk Base service has been significantly expanded. The index size for both Splunk Server and Splunk Professional has been reduced from 3x to 1.2x that of the raw data, and the index performance has been boosted.
Release Notes: Vastly improved UI design and interaction. Many search language refinements. Tags replace eventtype names. Events are summarized by source type as well as source. Inverted mode turns the interface black instead of white. Splunk Service integration to look up specific event types against tags and descriptions posted by the community. Log anonymization technology that Splunk is about to release via GPL. Many resolved issues recognizing and normalizing timestamps.
Release Notes: The installer was updated to work on any 2.6+ kernel distribution or any 2.4.2+ kernel distribution that uses NPTL. Problems encountered when indexing large amounts of data were fixed.