I have a 3.4.10 on Linux running without any ( major) issues. However, whenever I have called Splunk Tech Support for addressing issues, they seem to be more comfortable with assisting with reference to 4.x code versus 3.4.10 and the advise of upgrading from 3.4 to 4.x has been a constant.
After researching the open web and Splunk answers, I note that some folks who had upgraded to 4.x have reported issues such as field extraction, lookup error etc.
I am looking for community feedback/first hand experience in upgrading 3.4.10 to a well known 4.x stable version on Linux OS.
Thanks
Pradeep
... View more