Release Notes: Event type assignments are more exact. Events of the same type are much less likely to be misclassified into separate types. splunkd recovers index data better when restarted after an abrupt termination or incomplete shutdown. This release can index events that have more than 10,000 characters in a single line. The verifyconfig command now handles zero-length XML files without error. Splunk Professional ships with a log4j appender for use on J2EE servers. The installer now shuts down splunkd before updating a prior installation.
Release Notes: Splunk now keeps its index optimized automatically. This eliminates the need to manually optimize the index for any reason. The splunk train command once again works as documented. A generic syslog source type has been added to Splunk's set of built-in known source types. Live Splunks can no longer be created without a name. Splunk Professional usernames can no longer be changed, either accidentally or intentionally. User interface rendering issues with Internet Explorer have been fixed.
Release Notes: This is a maintenance release. It increases stability but makes no changes to configuration or operation.
Release Notes: Both Splunk Professional and the free Splunk Server can be installed in any directory without the need for an /opt/splunk directory or link. The FIFO input processor now reads information continuously. Several other minor bugfixes were made, including a heisenbug that was causing miscellaneous segfaults.
Release Notes: All ports can be now be set during installation. Users can set a database location during installation. Solaris search core dump has been fixed. Hostregex extraction is now working. Fifo input processors are now working, and there are other minor bugfixes.