Deployment Architecture

Python Versions in Splunk 8.0

sarvesh_11
Communicator

Hello Splunkers!

Wish You are safe and healthy from this pandemic.

I am using Splunk 8.0 Version, because it gives the flexibility with Python Versions (Python 2 and Python 3).

I have 2 different Splunk Applications, that gives me scripted inputs.

1 of the app executed on Python 2.7.17 and another runs on Python 3.7.17

How can i achieve the inputs from both of these apps?

Labels (1)
0 Karma

DavidHourani
Super Champion

Hi @sarvesh_11 ,

You can try modifying app.conf for a specific app under the install stanza:

 

python.version = {default|python|python2|python3}
* When 'installit.py' exists, selects which Python version to use.
* Set to either "default" or "python" to use the system-wide default Python
  version.
* Optional.
* Default: Not set; uses the system-wide Python version.

 

https://docs.splunk.com/Documentation/Splunk/latest/admin/appconf#.5Binstall.5D

This will apply the change only to that app and leave your other app with the default python version from your default server.conf.

Cheers,

David

0 Karma

sarvesh_11
Communicator

No @DavidHourani , that doesnt solves it.

I gave python.version in both app.conf for different application, but unable to execute Python3 scripts.

0 Karma

gcusello
Legend

Hi @sarvesh_11,

probably (I never tested it!) you could have two python instances, but my hint is to migrate as soon as possible the old one to the last Python version, because in few time Python 2 will be out.

Ciao.

Giuseppe

0 Karma

sarvesh_11
Communicator

That’s the last option I am left with.

but I wonder, why Splunk 8.0 embedded with 2 Python versions, if this usecase is not possible.

0 Karma

gcusello
Legend

Hi @sarvesh_11,

Splunk 8 has both the versions for retro compatibility but, for my knoledge, you can enable only one of them.

Did you tried the Python3 script with the Python2 interpreter?

Ciao.

Giuseppe

0 Karma

sarvesh_11
Communicator

No I did not.

Is there any handy doc or some link to which I can refer and resolve.

if that resolves, that would be great help.

 

TIA,

0 Karma
Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...