Splunk 6.5 added global environment tokens that are accessible in SimpleXML (http://docs.splunk.com/Documentation/Splunk/6.5.0/Viz/tokens#Use_global_tokens_to_access_environment...), one of which reports the version of the Splunk instance, $env:version$
.
How does one obtain the equivalent version number from an app in Splunk 6.4 or older?
I am most interested in obtaining this value using SplunkJS or SimpleXML, e.g., a function call in SplunkJS or a rest
search.
I am aware some of the global environment tokens are accessible via the REST API, but I cannot seem to find anything that reports the version. A SplunkJS function call would be the most ideal.
Here is a related question for the splunk_server value: https://answers.splunk.com/answers/506296/is-there-a-javascript-token-with-the-hostname-of-t.html
have a look at the server/info REST endpoint: http://docs.splunk.com/Documentation/Splunk/6.4.0/RESTREF/RESTintrospect#GET_server.2Finfo_method_de...
it will return a version property which is what you are looking for
have a look at the server/info REST endpoint: http://docs.splunk.com/Documentation/Splunk/6.4.0/RESTREF/RESTintrospect#GET_server.2Finfo_method_de...
it will return a version property which is what you are looking for
Thank you. Don't know how I missed that.
For those curious, this is the actual query that is probably the simplest. It assumes your user can be authenticated to call the REST endpoint.
| rest splunk_server=local count=1 /services/server/info | table version
is this what you were after??
| rest /services/apps/local | table title version