Getting Data In

How to obtain the Splunk instance's version from app (SimpleXML or SplunkJS) in 6.4 or older?

rjthibod
Champion

Splunk 6.5 added global environment tokens that are accessible in SimpleXML (http://docs.splunk.com/Documentation/Splunk/6.5.0/Viz/tokens#Use_global_tokens_to_access_environment...), one of which reports the version of the Splunk instance, $env:version$.

How does one obtain the equivalent version number from an app in Splunk 6.4 or older?

I am most interested in obtaining this value using SplunkJS or SimpleXML, e.g., a function call in SplunkJS or a rest search.

I am aware some of the global environment tokens are accessible via the REST API, but I cannot seem to find anything that reports the version. A SplunkJS function call would be the most ideal.

Here is a related question for the splunk_server value: https://answers.splunk.com/answers/506296/is-there-a-javascript-token-with-the-hostname-of-t.html

0 Karma
1 Solution

lweber
Path Finder

have a look at the server/info REST endpoint: http://docs.splunk.com/Documentation/Splunk/6.4.0/RESTREF/RESTintrospect#GET_server.2Finfo_method_de...

it will return a version property which is what you are looking for

View solution in original post

0 Karma

lweber
Path Finder

have a look at the server/info REST endpoint: http://docs.splunk.com/Documentation/Splunk/6.4.0/RESTREF/RESTintrospect#GET_server.2Finfo_method_de...

it will return a version property which is what you are looking for

0 Karma

rjthibod
Champion

Thank you. Don't know how I missed that.

0 Karma

rjthibod
Champion

For those curious, this is the actual query that is probably the simplest. It assumes your user can be authenticated to call the REST endpoint.

| rest splunk_server=local count=1 /services/server/info | table version

0 Karma

asimagu
Builder

is this what you were after??

| rest /services/apps/local | table title version
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Your Feedback. Our Roadmap. Visit the PX Feedback Booth at .conf26

You use Splunk every day, come and help shape what's next.  Save Your Seat: Product-Focused Sessions at ...

Agentic SOC Triage: Investigating Splunk ES Notables with MCP Server and a Local LLM

The Problem: Too Many Alerts, Too Little Context Security operations teams running Splunk Enterprise Security ...

Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas

Watch Now Painting a Clearer Picture: Creating Cross-Domain Visibility with AI Canvas     Do you ever feel ...