Skip to content

4.0.1

Choose a tag to compare

@gjanders gjanders released this 17 Nov 02:52
· 11 commits to master since this release

New dashboard:
-heavy_forwarder_analysis - as found in the conf24 presentation PLA1509B

New reports:

  • SearchHeadLevel - Job performance data per indexer handoff time
  • SearchHeadLevel - KVStore collection size
  • SearchHeadLevel - Savedsearches with schedules and no next_scheduled_time

Updated alerts:

  • AllSplunkEnterpriseLevel - Splunkd Log Messages Admins Only - search updates
  • AllSplunkEnterpriseLevel - Email Sending Failures - added app context
  • IndexerLevel - These Indexes Are Approaching The warmDBCount limit - added datatype=all argument
  • IndexerLevel - Cold data location approaching size limits - added datatype=all argument
  • IndexerLevel - Unclean Shutdown - Fsck - added datatype=all argument
  • SearchHeadLevel - Peer timeouts or authentication issues - updates to use Splunkd source
  • SearchHeadLevel - Splunk alert actions exceeding the max_action_results limit - excluded summary indexing
  • SearchHeadLevel - Scheduled Searches without a configured earliest and latest time - rewrote search for efficiency
  • SearchHeadLevel - Search Messages user level - search updates
  • SearchHeadLevel - Search Messages admins only - search updates

Updated dashboards:

  • splunk_forwarder_output_tuning - updated comments, removed heartbeatFrequency

Updated macros:

  • search_type_from_sid - minor tweaks to regex

Updated reports:

Also updated the navigation menu.