6.6.2

Splunk Enterprise 6.6.2 was released on June 29, 2017.

For information about security fixes not related to authentication or authorization, refer to the Splunk Security Portal.

Issues are listed in all relevant sections. Some issues appear more than once.

Data input issues

Date resolved Issue number Description 2017-05-23 SPL-141803, SPL-138975 "recursive = false" excludes monitored directory rather than sub-directory..

Search issues

Date resolved Issue number Description 2017-06-21 SPL-141324, SPL-138381 Lookups with multivalued keys not returning results on Windows 2017-06-12 SPL-138851, SPL-129875 Turkey timezone change to +03:00 (permanent Daylight Saving) 2017-06-08 SPL-141862, SPL-140361 Edit Search dialog does not include options for summary indexing. 2017-06-05 SPL-141764, SPL-141753 Splunk Web search results displays incorrect timezone for Solomon Is., New Caledonia and Fiji, Kamchatka, Marshall Is 2017-05-23 SPL-140782, SPL-140667 Wildcard for srchIndexesAllowed does not appear to work for custom indexes 2017-05-23 SPL-140680, SPL-140449 Unable to expand syntax highlighted JSON 2017-05-23 SPL-141270, SPL-140704 Syntax highlighting stops working when backslash character is used between the double quotes 2017-05-23 SPL-138886, SPL-135977 Improve error message on SSL errors on "browse more apps" page 2017-05-17 SPL-141851, SPL-136768 srchDiskQuota appears not to work as designed

Saved search, alerting, scheduling, and job management issues

Date resolved Issue number Description 2017-05-10 SPL-141332, SPL-141138 acceleration.manual_rebuilds in datamodels.conf.spec lists lookup updates as a reason for rebuilding 2017-05-09 SPL-140888, SPL-130809 Backfill script may cause scheduled search to be re-run after restart.

Charting, reporting, and visualization issues

Date resolved Issue number Description 2017-06-02 SPL-141972, SPL-137748 Browser memory leak when reloading dashboards 2017-05-23 SPL-140678, SPL-136610 Dashboard *Convert to HTML* loses refresh attributes from base search. 2017-05-23 SPL-140807, SPL-140551 Spaces between "sort - " and "fields - " are removed upon a Dashboard edit in Splunk Enterprise 6.5.2 on Windows with IE 11

Data model and pivot issues

Date resolved Issue number Description 2017-05-10 SPL-141332, SPL-141138 acceleration.manual_rebuilds in datamodels.conf.spec lists lookup updates as a reason for rebuilding 2017-05-09 SPL-140888, SPL-130809 Backfill script may cause scheduled search to be re-run after restart.

Indexer and indexer clustering issues

Date resolved Issue number Description 2017-05-30 SPL-141468, SPL-140333 Disappearing cold bucket directories can wedge IndexerService thread (and others) while calculating bucket checksums 2017-05-24 SPL-141855, SPL-141709 Cluster Master crashes during bundle creation if master-apps directory is not present

Distributed search and search head clustering issues

Date resolved Issue number Description 2017-06-08 SPL-141815, SPL-137415 SHC member crash with signal 6 (Aborted) in DistributedSearchResultCollectorThread

Universal forwarder issues

Date resolved Issue number Description 2017-05-22 SPL-141821, SPL-141740 Universal Forwarder warns if kernel has transparent huge pages enabled in splunkd.log 2017-05-09 SPL-140546, SPL-135562 Universal forwarder on AIX attempts to start splunkweb during internally-triggered restart, warns that "SRC did not 'stopsrc splunkweb'".

Distributed deployment, forwarder, deployment server issues

Date resolved Issue number Description 2017-06-07 SPL-141500, SPL-116884 When editing forwarded input with same source path, the changes get applied to a different input

Monitoring Console/DMC issues

Date resolved Issue number Description 2017-05-23 SPL-138969, SPL-137673 When running Health check on 6.5.2 Some linux items check on window some are skipped

Splunk Web and interface issues

Date resolved Issue number Description 2017-06-21 SPL-141324, SPL-138381 Lookups with multivalued keys not returning results on Windows 2017-06-12 SPL-138851, SPL-129875 Turkey timezone change to +03:00 (permanent Daylight Saving) 2017-06-08 SPL-141862, SPL-140361 Edit Search dialog does not include options for summary indexing. 2017-06-05 SPL-141764, SPL-141753 Splunk Web search results displays incorrect timezone for Solomon Is., New Caledonia and Fiji, Kamchatka, Marshall Is 2017-05-23 SPL-140782, SPL-140667 Wildcard for srchIndexesAllowed does not appear to work for custom indexes 2017-05-23 SPL-140680, SPL-140449 Unable to expand syntax highlighted JSON 2017-05-23 SPL-141270, SPL-140704 Syntax highlighting stops working when backslash character is used between the double quotes 2017-05-23 SPL-138886, SPL-135977 Improve error message on SSL errors on "browse more apps" page 2017-05-17 SPL-141851, SPL-136768 srchDiskQuota appears not to work as designed

Authentication and Authorization issues

Date resolved Issue number Description 2017-05-23 SPL-140782, SPL-140667 Wildcard for srchIndexesAllowed does not appear to work for custom indexes 2017-05-22 SPL-140474, SPL-134858 CLI auth token, under certain conditions, not removed on logout if the system name reported by the "hostname" command differs from the Splunk server name set in server.conf

Uncategorized issues