Splunk 3.3.3

Splunk Server is a tool that indexes logs from ANY source (apache, OS X, sendmail, routers). No need to configure it for specific formats, write regular expressions or change your logging output.
Search mountains of data by time, keywords, type of event, source, host or relationships to other events. Note: Splunk is server software. You configure and use the software via a web browser.
Main features:>
Application Availability
Navigate web sessions, container calls and database transactions to investigate J2EE, LAMP, .Net and custom applications problems.
Server Management
Search Linux, Unix and Windows events across thousands of servers from one place to find problems and automate change analysis.
Network Management
Alert and report on terabytes of router, firewall, IDS, SNMP and syslog data to find and fix problems and automate security reporting.
Email Administration
Trace inbound and outbound messages across complex MTA, antispam, authentication and delivery agent components in seconds.
Transaction Analysis
Speed your ability to answer questions from business people, help desk and customer support staff asking about customer transactions.
Compliance
Meet your compliance requirements to manage, alert and report on logs and IT data for specific mandates including CoBIT, COSO, FFIEC, FISMA, GLBA, HIPAA, ISO17799/BS7799, NISPOM, PCI, SOX.

Enhancements:
- The free version of Splunk no longer returns an auth error when attempting to access REST endpoints. (SPL-13741)
- Spool input now consumes different files with the same name. (SPL-14536)
- indexes.conf is now deployable. (SPL-14480)
- Break_before_date in props.conf is now functional. (SPL-14363)
- All file types now show the correct timestamp in Splunk Web. (SPL-14347)
- Custom timerange now resets correctly when starting a new search. (SPL-14142)
- Subsearches that return 0 results are no longer ignored in the search pipeline. (SPL-14006)
- The User role can now search distributed search instance without allow_livetail capability enabled. (SPL-13828)
- LDAP user DN to group member entry mapping is no longer case sensitive. (SPL-13752)
- Event type attribute values are no longer case-sensitive. (SPL-13577)
- Eventtypes with complex phrasing are now searchable and reportable. (SPL-11340)
- Auto tImestamp extraction now recognizes AM & PM in event data. (SPL-13736)
- The filter option in the file system change monitor now works on Windows. (SPL-13610)
- The deployment server now restarts Splunk Web. (SPL-13281)
- The send email script no longer sends 2 emails. (SPL-6892)
- The search idxprobe now looks into colddb. (SPL-14124)
- Metrics now have a tunable parameter for the number of results in sample period. (SPL-14090)
- Splunk now auto-extracts fields for | idxprobe tsidx. (SPL-14062)
- Pie charts now show values. (SPL-13755)
- You can now specify -format csv if specifying -header false when searching. (SPL-13392)
- The source for UDP inputs is now set correctly. (SPL-13739)
- On Windows and AIX, Splunk was using an out of date Olsen database to determine proper timezone offsets. This database has been updated. (SPL-14347)
- If you are using IE6, you will no longer see an error dialog saying Error: Cant move focus to the control because it is invisible, not enabled or of a type that does not accept the focus. (SPL-13331)
- Issues with assigning multiple graph types to a saved search have been resolved. (SPL-9893)
- Dashboard loading issues arising from a security fix in the 3.2.3 release of Splunk have been resolved. (SPL-13639, SPL-13656)
- Windows only: Splunk now picks up new and changed files correctly without needing to restart. (SPL-14281)
- Windows only: Typeahead now correctly escapes in Windows file-path. (SPL-14095)
- Windows only: coldToFrozenScript = echo $DIR in indexes.conf now functions correctly. (SPL-14008)
- Windows Event Logs are input correctly when "Run Splunk" is unchecked at the end of the installation. (SPL-14121)
- Regexes with backslashes in them are now supported when specifying paths to files. (SPL-12679)