Other Usage

Getting errors while importing python Splunk modules.


Getting below errors while importing splunklib and splunk-sdk python packages. Any resolutions please?

Building wheels for collected packages: pycrypto
Building wheel for pycrypto (pyproject.toml) ... error
error: subprocess-exited-with-error

× Building wheel for pycrypto (pyproject.toml) did not run successfully.
│ exit code: 1
╰─> [28 lines of output]
warning: GMP or MPIR library not found; Not building Crypto.PublicKey._fastmath.



[end of output]

note: This error originates from a subprocess, and is likely not a problem with pip.
ERROR: Failed building wheel for pycrypto
Failed to build pycrypto
ERROR: Could not build wheels for pycrypto, which is required to install pyproject.toml-based projects

0 Karma


It seems that splunklib is trying to get the obsolete pycrypto library. Ideally you should configure it to use the Cryptography or pycrypodome library.

There is an answer here how to change splunklib to use pycryptodome: https://stackoverflow.com/questions/59104347/how-do-i-install-splunklib-for-python-3-7-on-windows

In case that link goes down, here are the instructions:

by Chris Chris Dec 2 2019, 8:42:

I finally found the way to install it:

Uninstall pycrypto

pip uninstall pycrypto

Install pycryptodome as replacement of pycypto

pip install pycryptodome

Install splunklib without dependencies

pip install splunklib --no-deps

Edit "pythonlib"\splunklib-1.0.0.dist-info\METADATA and replace "Requires-Dist: pycrypto" with "Requires-Dist: pycryptodome"

install splunk-sdk

pip install splunk-sdk

check that everything is ok

pip install splunklib


0 Karma
Get Updates on the Splunk Community!

Database Performance Sidebar Panel Now on APM Database Query Performance & Service ...

We’ve streamlined the troubleshooting experience for database-related service issues by adding a database ...

IM Landing Page Filter - Now Available

We’ve added the capability for you to filter across the summary details on the main Infrastructure Monitoring ...

Dynamic Links from Alerts to IM Navigators - New in Observability Cloud

Splunk continues to improve the troubleshooting experience in Observability Cloud with this latest enhancement ...