Getting Data In

Is it possible to use a Splunk Deployment Server to push out Python 2.7 to the forwarder?

BrendanMcE
Path Finder

As the splunk forwarder is missing python and relies on the OS python, could we not create an app "python2.7" on the deployment server and push this out to each host we manage, then use this version of python for running other splunk applications?
We need to get Python 2.7 out to the forwarders but the OS has version 2.6 and we do not want to replace this. The hosts also do not have access to the internet to download version 2.7. Thus build Python 2.7 on the deployment server and then push it out.

0 Karma
1 Solution

BrendanMcE
Path Finder
0 Karma

kml_uvce
Builder

yes you can do this but not recommended, you can use any other tool like puppet etc for this...

0 Karma

lguinn2
Legend

The Splunk forwarder cannot "push out" any binary! Forwarders take in data and send it to indexers. That's it.

Even the deployment server can't manage binaries.

Sorry.

0 Karma

BrendanMcE
Path Finder

I have been able to push out some libraries and binaries from the deployment server to the forwarder by just creating and app and adding the files to this. So this looks like it should be possible. Just need to work out what is needed to get the local Python2.7 working

Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

(view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...