Splunk Search

Is there internal Splunk data I can search to find the latest timestamp when an app from Splunkbase was installed?

nibinabr
Communicator

Is there a splunk search that I can use to find the latest timestamp when an app was installed? Is there an internal index that contains this information?

0 Karma

dolivasoh
Contributor

Assuming the logs contain something like "installed",

index=blah sourcetype=blah app_name "installed" | stats latest(_time) as Time

0 Karma

nibinabr
Communicator

I think my question wasn't clear enough. Which index and sourcetype are you referring to here ? My logs doesn't contain this info. Are there any logs internal to splunk that keeps track of this information ? I'm trying to find the last time an app was installed (or a newer version of the app is installed).

0 Karma
Get Updates on the Splunk Community!

Splunk Decoded: Service Maps vs Service Analyzer Tree View vs Flow Maps

It’s Monday morning, and your phone is buzzing with alert escalations – your customer-facing portal is running ...

What’s New in Splunk Observability – September 2025

What's NewWe are excited to announce the latest enhancements to Splunk Observability, designed to help ITOps ...

Fun with Regular Expression - multiples of nine

Fun with Regular Expression - multiples of nineThis challenge was first posted on Slack #regex channel ...