Splunk Google cloud platform add-on 3.0.2 input fails with exception for 7.2.3

[stanwindiasjlp]

Hi all

Splunk Google add-on 3.0.2 input fails with exception for 7.2.3

the docs state that the add-on is supported for 7.2.3: https://docs.splunk.com/Documentation/AddOns/released/GoogleCloud/Releasenotes

We have a case open, but splunk state upgrading to python 3?

however in server.conf  of 7.2.3 there is no option in the spec file to add the python switch. 

So even if we install python 3 , how do we force splunk to use it?( alternatively if will mean having to test other add-ons for compatibility also , there is the migration app I am aware.)

https://docs.splunk.com/Documentation/Splunk/7.2.3/Admin/Serverconf
below setting is not available in 7.2.3  spec , it is quoted in 8.x

[general]
python.version = {python2|python3|force_python3}
* For Python scripts only, sets the default Python version to use.
* Can be overridden b

Sample of errors for inputs. 

2020-11-12 13:41:01,373 level=INFO pid=62379 tid=MainThread logger=splunksdc.collector pos=collector.py:run:248 |  | message="Modula
r input started."
2020-11-12 13:41:06,813 level=ERROR pid=62379 tid=MainThread logger=splunk_ta_gcp.modinputs.pubsub pos=utils.py:wrapper:68 | start_t
ime=1605188461 datainput="Prod_input_testing" | message="Data input was interrupted by an unhandled exception."
Traceback (most recent call last):
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/splunksdc/utils.py", line 66, in wrapper
    return func(*args, **kwargs)
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/splunk_ta_gcp/modinputs/pubsub.py", line 489, in run
    return handler.run(subscriptions)
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/splunk_ta_gcp/modinputs/pubsub.py", line 383, in run
    return self._run_consumer(subscriptions[0])
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/splunk_ta_gcp/modinputs/pubsub.py", line 393, in _run_consumer
    consumer.run()
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/splunk_ta_gcp/modinputs/pubsub.py", line 189, in run
    parcel = agent.pull()
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/splunk_ta_gcp/modinputs/pubsub.py", line 135, in pull
    self._ttl = self._get_acknowledge_deadline()
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/splunk_ta_gcp/modinputs/pubsub.py", line 168, in _get_acknowledge_de
adline
    content = response.json()
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/3rdparty/requests/models.py", line 897, in json
    return complexjson.loads(self.text, **kwargs)
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/simplejson/__init__.py", line 516, in loads
    return _default_decoder.decode(s)
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/simplejson/decoder.py", line 374, in decode
    obj, end = self.raw_decode(s)
  File "/opt/splunk/etc/apps/Splunk_TA_google-cloudplatform/bin/simplejson/decoder.py", line 404, in raw_decode
    return self.scan_once(s, idx=_w(s, idx).end())
JSONDecodeError: Expecting value: line 1 column 1 (char 0)

Wondering if anyone had had similar experience..

note that the migration tool in the app fails due to future package not being available ( that is a separate issue..) it needs the future package of python 3