Where can we get OS details of installed software in webui for general user not an Admin

[PONAS]

Hi 

Where can we get OS details of installed software in Splunk webui for general user not an Admin.Thanks,

[isoutamo]

If you have access to use rest you can try this

|rest /services/server/info|transpose

Other option is that you ask that your admin create report which you can run "as report owner" authority and it will give that information to you. Base search could be previous SPL and then just add needed fields as output table. 

[PickleRick]

Wait a second. What "installed software"? Where? Components of your Splunk environment or an inventory of software installed across your company? Splunk on its own is not an inventory solution. It can be used as one to some extent but it needs something to feed it this data.

[PONAS]

Splunk/ITSI was installed on one of the operating systems. How can we determine whether it's Linux or Windows using the Dashboard or Web UI, assuming I'm not a Splunk Admin?  Thanks,

[PickleRick]

Splunk should not present this kind of information directly to a user. If you were an admin (or at least had acces to the _internal index) you could look for hints like file path names. Other than that I don't see an obvious way to do it (unless there is additional info collected from this host and available for you in an index but we don't know that).

[PONAS]

How would we know -whether we have access to the _internal index?

[PickleRick]

You can just try to search from it.

index=_internal

But an ordinary user typically doesn't have access to _internal. They have no need to have such access.

[PONAS]

If we have access to index=_internal then how we check the OS details via Splunk WebUI please. Thanks,

[PickleRick]

Generally, that's not an information which should be important or needed for you as a user. Why do you care what OS the Splunk software is running on as long as it's doing what it's supposed to?

[PONAS]

There was an issue with the Splunk-generated report shared via email. It displayed partial data with an incorrect timestamp—specifically, data from the previous day. We need to investigate the logs to identify the root cause, but currently we’re unable to access them due to permission restrictions. Therefore, we are requesting minimal access to the relevant logs for troubleshooting purposes.Thanks,

[PONAS]

Thanks Prewin for info

But my requirement is needed to check OS details of installed Splunk/ITSI though WebUI any substitute way .  Thanks, 

[PrewinThomas]

@PONAS 

General users can only see OS/software details if admins have ingested and exposed that data in dashboards or indexes. Otherwise, the Web UI won’t show it by default.

Regards,
Prewin
If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!