Search to show what apps are ready to be updated

| rest splunk_server=local /services/apps/local | search update.version=* | table title version update.version

If that Splunk has internet access, it'll have the

update.*

fields filled with the latest version if there is an update available for any app installed on that system. The

splunk_server

filter should be usable for querying search peers as well. Using that scheduled daily or weekly, you could alert yourself of any update.   Got it here: https://answers.splunk.com/answers/336868/has-anyone-created-a-scheduled-search-that-notifie.html