Hello, To check version of all apps and add-ons installed on Splunk via CLI? ./splunk list app && ./splunk list add-ons | sort AND try this one in GUI in Splunk search query and run this query: | rest /services/apps/local splunk_server=local | table title version ... View more

Yes, I used this query: | rest /services/apps/local splunk_server=* | search disabled=0 core=0 | fields title label version splunk_server | stats values(title) as title, values(label) as label, values(version) as version, by splunk_server disabled=0 is only listing the apps that are enabled (in use) core=0 is only listing the apps that are not Splunk core apps (part of the install pkg) ... View more

This helped me fix my issue! Thanks! ... View more

You can run /opt/caspida/bin/utils/uba_health_check.sh and check the output for errors. If you can find something that may cause splunk ui fails, you should better create a support ticket. ... View more

how can you fix this issue when you have thousands of buckets in pending? I have around 4800 buckets and i cannot go and execute roll command on each and every Index right? Can you give me any solution for this please? Thanks for the answer.   @jbarlow_splunk  ... View more

i am also seeing this errors , any one has worked on it so far ? ... View more

Thank you, i'll check that out! ... View more

Throttle on mytime | eval mytime=strftime(_time, "%Y%m%d") ... View more