Splunk discloses Y2K-style bug

guest · Nov 30, 2019

Splunk discloses Y2K-style bug
November 28, 2019
https://www.crn.com.au/news/splunk-discloses-y2k-style-bug-534695

Splunk has revealed a bug in its platform that would fail to recognise timestamps starting on 1 January 2020, drawing similarities to the infamous Y2K bug.

The bug stems from a faulty XML file, datetime.xml, that the Splunk platform input processor uses to determine the right timestamps based on incoming data.

In the release notes for Splunk version 8.0.0, the data-crunching software vendor said, “Beginning on January 1, 2020, un-patched Splunk platform instances will be unable to recognize timestamps from events where the date contains a two-digit year. This means data that meets this criteria will be indexed with incorrect timestamps.”
Some of the issues could result in incorrect timestamping of incoming data, incorrect rollover of data buckets due to the incorrect timestamping, incorrect retention of data overall, and incorrect search results due to data ingested with incorrect timestamps.
Click to expand...

In case you need a reminder, the Y2K bug was the term used to describe problems related to the date transition in computer systems from 1999 to 2000, where many thought it would bring down computer systems infrastructure globally.
Click to expand...

Log in or Sign up

Splunk discloses Y2K-style bug

guest Guest

Log in or Sign up

Splunk discloses Y2K-style bug

guest Guest

Useful Searches