Related Answers
Download topic as PDF
Determine which version of Splunk Enterprise you're running
In Splunk Web
Click the About link at the bottom left of most pages in Splunk Web to view a JavaScript overlay with the version and build numbers.
At the command line
Use one minus or two minuses; Splunk gets it either way:
> ./splunk --version Splunk 6.0 (build 181491)
or
> ./splunk -version Splunk 6.0 (build 181491)
From the files
You can get the version information from the file $SPLUNK_HOME/etc/splunk.version
> cat $SPLUNK_HOME/etc/splunk.version VERSION=6.0 BUILD=181491 PRODUCT=splunk PLATFORM=Darwin-x86_64
In Splunk Search
Splunk Enterprise indexes the splunk.version file into the _internal index and sends it along to the indexer by forwarders.
Here's a search that shows you how many installs you have of each Splunk Enterprise version:
index=_internal sourcetype=splunk_version | dedup host | top VERSION
|
PREVIOUS Introduction to troubleshooting Splunk Enterprise |
NEXT Use btool to troubleshoot configurations |
This documentation applies to the following versions of Splunk® Enterprise: 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.3.8, 6.3.9, 6.3.10, 6.3.11, 6.3.12, 6.3.13, 6.3.14, 6.4.0, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.4.7, 6.4.8, 6.4.9, 6.4.10, 6.4.11, 6.5.0, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.5.7, 6.5.8, 6.5.9, 6.5.10, 6.6.0, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.6.10, 6.6.11, 6.6.12, 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13
Feedback submitted, thanks!