Determine which version of Splunk Enterprise you're running
In Splunk Web
Click the About link at the bottom left of most pages in Splunk Web to view a JavaScript overlay with the version and build numbers.
At the command line
Use one minus or two minuses; Splunk gets it either way:
> ./splunk --version Splunk 6.0 (build 181491)
or
> ./splunk -version Splunk 6.0 (build 181491)
From the files
You can get the version information from the file $SPLUNK_HOME/etc/splunk.version
> cat $SPLUNK_HOME/etc/splunk.version VERSION=6.0 BUILD=181491 PRODUCT=splunk PLATFORM=Darwin-x86_64
In Splunk Search
Splunk Enterprise indexes the splunk.version file into the _internal index and sends it along to the indexer by forwarders.
Here's a search that shows you how many installs you have of each Splunk Enterprise version:
index=_internal sourcetype=splunk_version | dedup host | top VERSION
Introduction to troubleshooting Splunk Enterprise | Use btool to troubleshoot configurations |
This documentation applies to the following versions of Splunk® Enterprise: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13
Feedback submitted, thanks!