Splunk Enterprise version 7.0 is no longer supported as of October 23, 2019. See the Splunk Software Support Policy for details. For information about upgrading to a supported version, see How to upgrade Splunk Enterprise.
This documentation does not apply to the most recent version of Splunk® Enterprise.
For documentation on the most recent version, go to the latest release.
Determine which version of Splunk Enterprise you're running
In Splunk Web
Click the About link at the bottom left of most pages in Splunk Web to view a JavaScript overlay with the version and build numbers.
At the command line
Use one minus or two minuses; Splunk gets it either way:
> ./splunk --version Splunk 6.0 (build 181491)
or
> ./splunk -version Splunk 6.0 (build 181491)
From the files
You can get the version information from the file $SPLUNK_HOME/etc/splunk.version
> cat $SPLUNK_HOME/etc/splunk.version VERSION=6.0 BUILD=181491 PRODUCT=splunk PLATFORM=Darwin-x86_64
In Splunk Search
Splunk Enterprise indexes the splunk.version file into the _internal index and sends it along to the indexer by forwarders.
Here's a search that shows you how many installs you have of each Splunk Enterprise version:
index=_internal sourcetype=splunk_version | dedup host | top VERSION
Last modified on 14 January, 2020
| Introduction to troubleshooting Splunk Enterprise | Use btool to troubleshoot configurations |
This documentation applies to the following versions of Splunk® Enterprise: 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4, 7.0.5, 7.0.6, 7.0.7, 7.0.8, 7.0.9, 7.0.10, 7.0.11, 7.0.13
Download manual
Feedback submitted, thanks!