We are getting requests for apps which haven't been updated since Splunk went from 5.x to 6.x. Besides the fact the app may not run (not an issue with this particular app), is there any reason to believe that such an app would impact our splunk infrastructure because it is a 5.x app? I know some apps will cause performance issues because they poorly designed the search or didn't use such things like summary indexes. I would argue that even Splunk 6 apps could cause similar issues.
↧