https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85652#M1212 <PRE><CODE>[splunk@server splunkforwarder]$ ls bin etc ftr lib license-eula.txt openssl README-splunk.txt share splunkforwarder-4.3-115073-Linux-x86_64-manifest [splunk@server splunkforwarder]$ cd etc/apps [splunk@server apps]$ ls learned search SplunkUniversalForwarder [splunk@server etc]$ cd ../bin [splunk@server bin]$ ./splunk cmd python couldn't run "/home/splunk/splunkforwarder/bin/python": No such file or directory </CODE></PRE> Fri, 11 Jan 2013 19:23:16 GMT the_wolverine 2013-01-11T19:23:16Z https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85652#M1212 <PRE><CODE>[splunk@server splunkforwarder]$ ls bin etc ftr lib license-eula.txt openssl README-splunk.txt share splunkforwarder-4.3-115073-Linux-x86_64-manifest [splunk@server splunkforwarder]$ cd etc/apps [splunk@server apps]$ ls learned search SplunkUniversalForwarder [splunk@server etc]$ cd ../bin [splunk@server bin]$ ./splunk cmd python couldn't run "/home/splunk/splunkforwarder/bin/python": No such file or directory </CODE></PRE> Fri, 11 Jan 2013 19:23:16 GMT https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85652#M1212 the_wolverine 2013-01-11T19:23:16Z https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85653#M1213 <P>Nope. This was a design decision for the 'universal forwarder' to not include python.</P> Fri, 11 Jan 2013 19:41:58 GMT https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85653#M1213 dwaddle 2013-01-11T19:41:58Z https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85654#M1214 <P><A href="http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Introducingtheuniversalforwarder">http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Introducingtheuniversalforwarder</A></P> <P>Unlike full Splunk, the universal forwarder does not include a bundled version of Python.</P> Fri, 11 Jan 2013 19:52:17 GMT https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85654#M1214 pwattssplunk 2013-01-11T19:52:17Z https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85655#M1215 <P>How did you end up in <CODE>/home/splunk/splunkforwarder/bin</CODE> by doing <CODE>cd ..</CODE> from <CODE>etc/apps</CODE>? <span class="lia-unicode-emoji" title=":winking_face:">😉</span></P> Fri, 11 Jan 2013 20:00:26 GMT https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85655#M1215 Ayn 2013-01-11T20:00:26Z https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85656#M1216 <P>LWF HF and indexer do include python.<BR /> Not the UF.</P> Fri, 11 Jan 2013 20:35:02 GMT https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85656#M1216 yannK 2013-01-11T20:35:02Z https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85657#M1217 <P>Ayn, I removed some lines to cover my internal information but just trust that part of it is working correctly.</P> Fri, 11 Jan 2013 21:46:56 GMT https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85657#M1217 the_wolverine 2013-01-11T21:46:56Z https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85658#M1218 <P>OK, so just to recap:</P> <P>universalforwarder (splunkforwarder) does not include python. </P> <P>Splunk (full version) with LWF or HF enabled does include python.</P> Fri, 11 Jan 2013 21:48:35 GMT https://community.splunk.com/t5/Splunk-Dev/There-s-no-python-in-splunkforwarder/m-p/85658#M1218 the_wolverine 2013-01-11T21:48:35Z