Splunk Enterprise

How to write a Splunk query to find the Splunk UF version for specific set of hosts in Splunk Enterprise

Hemnaath
Motivator

Hi Team,

I wanted to wirte query to find the Splunk agent version of specific set of hosts in our environment, I had tired the below link to find out version detail for all UF uisng the below link.

https://community.splunk.com/t5/Getting-Data-In/How-can-I-find-a-listing-of-all-universal-forwarders...

But I am unable to segregate to specific set of hosts.  So could anyone let me know how to wirte a query to fetch the version details.

 

Thanks in Advance. 

Labels (2)
Tags (1)
0 Karma

richgalloway
SplunkTrust
SplunkTrust

The Monitoring Console will do that, if you have forwarder monitoring enabled.  Go to Forwarders->Forwarders:Deployment in the MC.

---
If this reply helps you, Karma would be appreciated.
0 Karma

Hemnaath
Motivator

thanks for your time,  Yes I know that we can find that from Splunk Monitoring console,  but is there a way to write a query which can be used to fetch specific set of host agent version from search head.

thanks in advance.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Grab the query from the MC and put it on the SH of choice.  Modify it as desired.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Observe and Secure All Apps with Splunk

  Join Us for Our Next Tech Talk: Observe and Secure All Apps with SplunkAs organizations continue to innovate ...

Splunk Decoded: Business Transactions vs Business IQ

It’s the morning of Black Friday, and your e-commerce site is handling 10x normal traffic. Orders are flowing, ...

Fastest way to demo Observability

I’ve been having a lot of fun learning about Kubernetes and Observability. I set myself an interesting ...