Using alternate Python for script data inputs

EricLloyd79 — Tue, 29 Sep 2020 16:47:35 GMT

We are trying to do some snmp queries using Python and input the output key-value pairs into Splunk.
We want to use pysnmp to do this.
Pysnmp (or its dependencies) do not come standard with the Splunk python libraries.

I have attempted putting "#!/root/anaconda2/python" in the first line of our script. But it does not read from the Anaconda Python version we want it to. I am concerned if it does, even, are there specific Splunk-related libraries that Splunk needs to handle the output of these scripts that won't be located in the Anaconda python version.

From another similar question, I tried using:

import sys
sys.path.append('root/anaconda2/bin/python')
sys.path.append('/root/anaconda2/lib/python2.7/site-packages')

This sorta seems to work but now I'm getting an issue seen below:
ERROR:root:code for hash md5 was not found.
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/hashlib.py", line 147, in
globals()[func_name] = __get_hash(func_name)
File "/opt/splunk/lib/python2.7/hashlib.py", line 97, in get_builtin_constructor
raise ValueError('unsupported hash type ' + name)
ValueError: unsupported hash type md5
ERROR:root:code for hash sha1 was not found.
Traceback (most recent call last):
File "/opt/splunk/lib/python2.7/hashlib.py", line 147, in
globals()[func_name] = get_hash(func_name)
File "/opt/splunk/lib/python2.7/hashlib.py", line 97, in get_builtin_constructor
raise ValueError('unsupported hash type ' + name)
ValueError: unsupported hash type sha1
Traceback (most recent call last):
File "get_aqx_intersite_bw.py", line 40, in
from pysnmp.entity.rfc3413.oneliner import cmdgen
File "/root/anaconda2/lib/python2.7/site-packages/pysnmp/entity/rfc3413/oneliner/cmdgen.py", line 10, in
from pysnmp.hlapi.asyncore import *
File "/root/anaconda2/lib/python2.7/site-packages/pysnmp/hlapi/init_.py", line 3, in
from pysnmp.hlapi.auth import *
File "/root/anaconda2/lib/python2.7/site-packages/pysnmp/hlapi/auth.py", line 7, in
from pysnmp.entity import config
File "/root/anaconda2/lib/python2.7/site-packages/pysnmp/entity/config.py", line 9, in
from pysnmp.proto.secmod.rfc3414.auth import hmacmd5, hmacsha, noauth
File "/root/anaconda2/lib/python2.7/site-packages/pysnmp/proto/secmod/rfc3414/init_.py", line 1, in
from pysnmp.proto.secmod.rfc3414 import service
File "/root/anaconda2/lib/python2.7/site-packages/pysnmp/proto/secmod/rfc3414/service.py", line 9, in
from pysnmp.proto.secmod.rfc3414.auth import hmacmd5, hmacsha, noauth
File "/root/anaconda2/lib/python2.7/site-packages/pysnmp/proto/secmod/rfc3414/auth/hmacmd5.py", line 10, in
import md5
File "/opt/splunk/lib/python2.7/md5.py", line 10, in
from hashlib import md5
ImportError: cannot import name md5

Please, can someone help me figure out how to use the pysnmp (and its dependencies) with a python script in Splunk? Thank you.

Re: Using alternate Python for script data inputs

Damien_Dallimor — Tue, 14 Nov 2017 21:10:38 GMT

Any reason you would not use https://splunkbase.splunk.com/app/1537/
Uses pysnmp and has been downloaded something like 15K+ times

Re: Using alternate Python for script data inputs

EricLloyd79 — Tue, 14 Nov 2017 21:22:37 GMT

Well that looks nice. Im doing what I was told to do and how it was done previously in PHP now in Python.
A deterministic factor is that we have to retrieve the SNMP MIBs based on their ifDesc rather than their index. I don't know if this has that capability. I will have to confirm I have permission to download this app to our indexers and see if its capable.
In the meantime, if there was a solution to use an alternate Python library for Python scripts in Splunk that'd be nice since I've got the scripts created and ready to ingest.

topic Using alternate Python for script data inputs in Getting Data In

Using alternate Python for script data inputs

Re: Using alternate Python for script data inputs

Re: Using alternate Python for script data inputs