Hi Team,
I wanted to wirte query to find the Splunk agent version of specific set of hosts in our environment, I had tired the below link to find out version detail for all UF uisng the below link.
But I am unable to segregate to specific set of hosts. So could anyone let me know how to wirte a query to fetch the version details.
Thanks in Advance.
The Monitoring Console will do that, if you have forwarder monitoring enabled. Go to Forwarders->Forwarders:Deployment in the MC.
thanks for your time, Yes I know that we can find that from Splunk Monitoring console, but is there a way to write a query which can be used to fetch specific set of host agent version from search head.
thanks in advance.
Grab the query from the MC and put it on the SH of choice. Modify it as desired.