All Apps and Add-ons

After upgrading to splunk enterprise 9.3 our splunk app is not able to find python modules

sbel
Observer

Our Splunk Add-on app was created with python modules ( like cffi, cryptography and PyJWT) where these modules are placed under app /bin/lib folder..  this add-on is working as expected.

When we try to upgrade Splunk Enterprise from 8.2.3  to 9.3,  our add-on is failing to load python modules and throwing error 'No module named '_cffi_backend' 

 

Note: we are running on python 3.7. and updated Splunk python SD to latest 2.0.2

Labels (1)
Tags (1)
0 Karma

Meett
Splunk Employee
Splunk Employee

Hey @sbel If you are using Splunk v9.3 then your app should be compatible with Python v3.9 by default.

For temporary time you can try to use this if it can help you but for long term you have to make apps compatible to Python v3.9.0
$SPLUNK_HOME/etc/system/local/server.conf/[general]/python.version = python3.9

0 Karma
Get Updates on the Splunk Community!

What’s New & Next in Splunk SOAR

Security teams today are dealing with more alerts, more tools, and more pressure than ever.  Join us on ...

Your Voice Matters! Help Us Shape the New Splunk Lantern Experience

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

September Community Champions: A Shoutout to Our Contributors!

As we close the books on another fantastic month, we want to take a moment to celebrate the people who are the ...