Splunk Dev

There's no python in splunkforwarder?

the_wolverine
Champion
[splunk@server splunkforwarder]$ ls
bin  etc  ftr  lib  license-eula.txt  openssl  README-splunk.txt  share  splunkforwarder-4.3-115073-Linux-x86_64-manifest

[splunk@server splunkforwarder]$ cd etc/apps
[splunk@server apps]$ ls
learned  search  SplunkUniversalForwarder

[splunk@server etc]$ cd ../bin
[splunk@server bin]$ ./splunk cmd python
couldn't run "/home/splunk/splunkforwarder/bin/python": No such file or directory
1 Solution

pwattssplunk
Splunk Employee
Splunk Employee

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Introducingtheuniversalforwarder

Unlike full Splunk, the universal forwarder does not include a bundled version of Python.

View solution in original post

the_wolverine
Champion

OK, so just to recap:

universalforwarder (splunkforwarder) does not include python.

Splunk (full version) with LWF or HF enabled does include python.

0 Karma

the_wolverine
Champion

Ayn, I removed some lines to cover my internal information but just trust that part of it is working correctly.

0 Karma

Ayn
Legend

How did you end up in /home/splunk/splunkforwarder/bin by doing cd .. from etc/apps? 😉

0 Karma

pwattssplunk
Splunk Employee
Splunk Employee

http://docs.splunk.com/Documentation/Splunk/latest/Deploy/Introducingtheuniversalforwarder

Unlike full Splunk, the universal forwarder does not include a bundled version of Python.

dwaddle
SplunkTrust
SplunkTrust

Nope. This was a design decision for the 'universal forwarder' to not include python.

yannK
Splunk Employee
Splunk Employee

LWF HF and indexer do include python.
Not the UF.

Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...