Splunk Enterprise 10.4.2 known issues

A list of key known issues in this version of Splunk Enterprise.

The following are issues and workarounds for this version of Splunk Enterprise. Issues are listed in all relevant sections. Some issues appear more than once.

Important: Splunk recommends that customers do not upgrade to version 10.4.2, but instead upgrade to version 10.4.3 or higher. Version 10.4.3 fixes the issue "Splunk 10.4.2 tcpout with useACK=true can cause pipeline blockage".