topic Re: Monitor Splunk Updates in Getting Data In

Monitor Splunk Updates

ivan_yanev — Tue, 16 Feb 2021 10:21:56 GMT

Hello,

I need some help. One of our clients wants to see when the patch version of Splunk is updated. Is this possible ?

manjunathmeti — Tue, 16 Feb 2021 10:47:51 GMT

hi @ivan_yanev ,
Check migration logs in _internal index.

index="_internal" source="*migration.log*" earliest=1 | table _time, host, PLATFORM, PRODUCT, VERSION, BUILD

If this reply helps you, an upvote/like would be appreciated.

ivan_yanev — Mon, 22 Feb 2021 05:56:28 GMT

@manjunathmeti thank you for your quick reply.

Probably this is correct but the internal index does not keep data older than 30 days so I cannot validate it.

I guess we'll find out if this work on next update.

UPDATE : I have decided to test it. I've updated the Splunk version of my virtual machine and it worked.