Splunk 10.7 Federated provider name case-insensitivity enforcement

Available Languages

Updated:October 27, 2026
Document ID:SPLK055844

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Applicability

Splunk Cloud

Description

Splunk Cloud Platform version 10.7, Federated Search enforces case-insensitivity for provider names. Mixed-case or uppercase provider names in the federated.conf and indexes.conf configuration files can cause federated datasets to enter an unknown status, searches to fail with invalid dataset specifier errors, and new dataset or index creation to be rejected. This change restores backward compatibility for pre-existing configurations by enforcing consistent naming.


Investigation

Impact: Duplicate federated providers that differ only by case, and administrators using Federated Search and Federated Analytics paths (FS-S2S, FS-S3, FS-SAL, and FA-ASL).


Resolution

Issue detection and mitigation guidance: For duplicate providers that differ only by case, follow the specific error message that the Splunk platform provides to update or remove the duplicate name.

Revision History

Revision Publish Date Comments
1.0
27-Oct-2026
Initial Release

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products