Splunk Enterprise 10.4.3 fixed issues
A list of issues that are fixed in this version of Splunk Enterprise.
This section includes information on key issues that have been fixed in releases of Splunk Enterprise.
Important: Splunk recommends that customers do not upgrade to version 10.4.2, but instead upgrade to version 10.4.3 or higher. Version 10.4.3 fixes the issue “Splunk 10.4.2 tcpout with useACK=true can cause pipeline blockage”.
Important: Splunk 10.4.2 tcpout with useACK=true can cause pipeline blockage In version 10.4.2, forwarding can stall when acknowledgements are enabled on a receiving heavy forwarder or indexer. This issue is fixed in version 10.4.3.