Our environment runs various versions of Splunk. For the upcoming Leap second at the end of the year, will there be any issues with any of the Splunk versions, or does Splunk just rely on the operating system?
My Universal Forwarders started eating up CPU after the leap second. I'm still working on it but the below link should help out. The second step is running that script on the sever. I'll be working on this with the system admins to confirm that it works. If it does I'll update you. Hope this helps out.