Deployment Architecture

Python Versions in Splunk 8.0

sarvesh_11
Communicator

Hello Splunkers!

Wish You are safe and healthy from this pandemic.

I am using Splunk 8.0 Version, because it gives the flexibility with Python Versions (Python 2 and Python 3).

I have 2 different Splunk Applications, that gives me scripted inputs.

1 of the app executed on Python 2.7.17 and another runs on Python 3.7.17

How can i achieve the inputs from both of these apps?

Labels (1)
0 Karma

DavidHourani
Super Champion

Hi @sarvesh_11 ,

You can try modifying app.conf for a specific app under the install stanza:

 

python.version = {default|python|python2|python3}
* When 'installit.py' exists, selects which Python version to use.
* Set to either "default" or "python" to use the system-wide default Python
  version.
* Optional.
* Default: Not set; uses the system-wide Python version.

 

https://docs.splunk.com/Documentation/Splunk/latest/admin/appconf#.5Binstall.5D

This will apply the change only to that app and leave your other app with the default python version from your default server.conf.

Cheers,

David

0 Karma

sarvesh_11
Communicator

No @DavidHourani , that doesnt solves it.

I gave python.version in both app.conf for different application, but unable to execute Python3 scripts.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @sarvesh_11,

probably (I never tested it!) you could have two python instances, but my hint is to migrate as soon as possible the old one to the last Python version, because in few time Python 2 will be out.

Ciao.

Giuseppe

0 Karma

sarvesh_11
Communicator

That’s the last option I am left with.

but I wonder, why Splunk 8.0 embedded with 2 Python versions, if this usecase is not possible.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @sarvesh_11,

Splunk 8 has both the versions for retro compatibility but, for my knoledge, you can enable only one of them.

Did you tried the Python3 script with the Python2 interpreter?

Ciao.

Giuseppe

0 Karma

sarvesh_11
Communicator

No I did not.

Is there any handy doc or some link to which I can refer and resolve.

if that resolves, that would be great help.

 

TIA,

0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...