
Determine which version of Splunk Enterprise you're running
In Splunk Web
Click the About link at the bottom left of most pages in Splunk Web to view a JavaScript overlay with the version and build numbers.
At the command line
Use one minus or two minuses; Splunk gets it either way:
> ./splunk --version Splunk 6.0 (build 181491)
or
> ./splunk -version Splunk 6.0 (build 181491)
From the files
You can get the version information from the file $SPLUNK_HOME/etc/splunk.version
> cat $SPLUNK_HOME/etc/splunk.version VERSION=6.0 BUILD=181491 PRODUCT=splunk PLATFORM=Darwin-x86_64
In Splunk Search
Splunk Enterprise indexes the splunk.version file into the _internal index and sends it along to the indexer by forwarders.
Here's a search that shows you how many installs you have of each Splunk Enterprise version:
index=_internal sourcetype=splunk_version | dedup host | top VERSION
PREVIOUS Introduction to troubleshooting Splunk Enterprise |
NEXT Use btool to troubleshoot configurations |
This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11, 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10, 6.6.11, 6.6.12, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13
Feedback submitted, thanks!