Splunk Dev

Add-ons generated with version 4.3.0 of the add-on builder are failing to validate due to an outdated splunk python sdk

addOnGuy
Loves-to-Learn Lots

I first tried exporting and importing the add-on after I moved to version 4.3.0 of the add-on builder. I then tried replacing the splunklib folders in the add-on builder and the app that is failing validation with one from the latest sdk release. I also used "pip install splunk-sdk" and "python setup.py install" to attempt to update the sdk. None of the changes seem to have had any effect. 

Labels (2)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @addOnGuy 

I would suggest updating your Add-On Builder version to the latest 4.4.1 which has a newer version of the splunk-sdk within it.

If you're unable to do this then using pip install might work but you need to ensure that you are replacing it in the correct location(s) - Not you need to use the "--target" or "-t" flag with pip to ensure its written to the correct location, otherwise it will be installed globally.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

0 Karma

addOnGuy
Loves-to-Learn Lots

I'm now using version 4.4.1 of the Add-On Builder, and that seems to have helped slightly. I'm still getting the same failure, but at least now it says I'm using version 2.0.1 of the python SDK. It requires version 2.0.2 though. I'm still completely lost as to how to satisfy the validator. Is anyone able to make it past this one? Here's the error output: [{"result": "failure", "message": "Detected an outdated version of the Splunk SDK for Python (2.0.1). Upgrade to 2.0.2 or later. File: bin/splunklib/__init__.py Line Number: 33", "message_filename": "bin/splunklib/__init__.py", "message_line": 33}, {"result": "warning", "message": "Splunk SDK for Python detected (version 2.1.0). No action required at this time. File: bin/ta_ignio_integration_add_on/aob_py3/splunklib/__init__.py Line Number: 33", "message_filename": "bin/ta_ignio_integration_add_on/aob_py3/splunklib/__init__.py", "message_line": 33}]

 

I'm also getting this validation error: [{"result": "failure", "message": "Found AArch64-incompatible binary file. Remove or rebuild the file to be AArch64-compatible. File: bin/ta_ignio_integration_add_on/aob_py3/yaml/_yaml.cpython-37m-x86_64-linux-gnu.so File: bin/ta_ignio_integration_add_on/aob_py3/yaml/_yaml.cpython-37m-x86_64-linux-gnu.so", "message_filename": "bin/ta_ignio_integration_add_on/aob_py3/yaml/_yaml.cpython-37m-x86_64-linux-gnu.so", "message_line": null}, {"result": "failure", "message": "Found AArch64-incompatible binary file. Remove or rebuild the file to be AArch64-compatible. File: bin/ta_ignio_integration_add_on/aob_py3/markupsafe/_speedups.cpython-37m-x86_64-linux-gnu.so File: bin/ta_ignio_integration_add_on/aob_py3/markupsafe/_speedups.cpython-37m-x86_64-linux-gnu.so", "message_filename": "bin/ta_ignio_integration_add_on/aob_py3/markupsafe/_speedups.cpython-37m-x86_64-linux-gnu.so", "message_line": null}]

 

Unfortunately, the Add-On Builder doesn't mention how to actually fix either issue, so I'm stuck for now. You mentioned using -t to target the pip install, but I'm not sure where I would be targeting. 

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @addOnGuy 

I think the target would be <yourApp>/bin/ta_ignio_integration_add_on/

If you look in that folder - is the previous version of splunk-sdk in there?

pip install --upgrade splunk-sdk --target <yourAppLocation>/bin/ta_ignio_integration_add_on/

 

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma
Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.

Can’t make it to .conf25? Join us online!

Get Updates on the Splunk Community!

What Is Splunk? Here’s What You Can Do with Splunk

Hey Splunk Community, we know you know Splunk. You likely leverage its unparalleled ability to ingest, index, ...

Level Up Your .conf25: Splunk Arcade Comes to Boston

With .conf25 right around the corner in Boston, there’s a lot to look forward to — inspiring keynotes, ...

Manual Instrumentation with Splunk Observability Cloud: How to Instrument Frontend ...

Although it might seem daunting, as we’ve seen in this series, manual instrumentation can be straightforward ...