Good day. I have looked in the community posts and know that there is a daylight savings time bug in some Splunk UF's. I have not found a definitive answer as to what 8.x.x version resolves it. We have a number of endpoints at 8.2.1. Is the bug corrected in that version or does it need to be upgraded?
Thanks in advance.
Hi,
As of this writing, you can view the release notes for the most recent maintenance version of Splunk Universal Forwarder 8.2 at https://docs.splunk.com/Documentation/Forwarder/8.2.10/Forwarder/Fixedissues to see current and past fixed issues.
Splunk resolved the following issues in Splunk Universal Forwarder 8.1.6 and 8.2.2:
2021-06-29 | SPL-208018, SPL-204906 | UF has problems recognizing the DST changes.