Splunk Dev

Add-ons generated with version 4.3.0 of the add-on builder are failing to validate due to an outdated splunk python sdk

addOnGuy
Loves-to-Learn Lots

I first tried exporting and importing the add-on after I moved to version 4.3.0 of the add-on builder. I then tried replacing the splunklib folders in the add-on builder and the app that is failing validation with one from the latest sdk release. I also used "pip install splunk-sdk" and "python setup.py install" to attempt to update the sdk. None of the changes seem to have had any effect. 

Labels (2)
0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @addOnGuy 

I would suggest updating your Add-On Builder version to the latest 4.4.1 which has a newer version of the splunk-sdk within it.

If you're unable to do this then using pip install might work but you need to ensure that you are replacing it in the correct location(s) - Not you need to use the "--target" or "-t" flag with pip to ensure its written to the correct location, otherwise it will be installed globally.

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

 

0 Karma

addOnGuy
Loves-to-Learn Lots

I'm now using version 4.4.1 of the Add-On Builder, and that seems to have helped slightly. I'm still getting the same failure, but at least now it says I'm using version 2.0.1 of the python SDK. It requires version 2.0.2 though. I'm still completely lost as to how to satisfy the validator. Is anyone able to make it past this one? Here's the error output: [{"result": "failure", "message": "Detected an outdated version of the Splunk SDK for Python (2.0.1). Upgrade to 2.0.2 or later. File: bin/splunklib/__init__.py Line Number: 33", "message_filename": "bin/splunklib/__init__.py", "message_line": 33}, {"result": "warning", "message": "Splunk SDK for Python detected (version 2.1.0). No action required at this time. File: bin/ta_ignio_integration_add_on/aob_py3/splunklib/__init__.py Line Number: 33", "message_filename": "bin/ta_ignio_integration_add_on/aob_py3/splunklib/__init__.py", "message_line": 33}]

 

I'm also getting this validation error: [{"result": "failure", "message": "Found AArch64-incompatible binary file. Remove or rebuild the file to be AArch64-compatible. File: bin/ta_ignio_integration_add_on/aob_py3/yaml/_yaml.cpython-37m-x86_64-linux-gnu.so File: bin/ta_ignio_integration_add_on/aob_py3/yaml/_yaml.cpython-37m-x86_64-linux-gnu.so", "message_filename": "bin/ta_ignio_integration_add_on/aob_py3/yaml/_yaml.cpython-37m-x86_64-linux-gnu.so", "message_line": null}, {"result": "failure", "message": "Found AArch64-incompatible binary file. Remove or rebuild the file to be AArch64-compatible. File: bin/ta_ignio_integration_add_on/aob_py3/markupsafe/_speedups.cpython-37m-x86_64-linux-gnu.so File: bin/ta_ignio_integration_add_on/aob_py3/markupsafe/_speedups.cpython-37m-x86_64-linux-gnu.so", "message_filename": "bin/ta_ignio_integration_add_on/aob_py3/markupsafe/_speedups.cpython-37m-x86_64-linux-gnu.so", "message_line": null}]

 

Unfortunately, the Add-On Builder doesn't mention how to actually fix either issue, so I'm stuck for now. You mentioned using -t to target the pip install, but I'm not sure where I would be targeting. 

0 Karma

livehybrid
SplunkTrust
SplunkTrust

Hi @addOnGuy 

I think the target would be <yourApp>/bin/ta_ignio_integration_add_on/

If you look in that folder - is the previous version of splunk-sdk in there?

pip install --upgrade splunk-sdk --target <yourAppLocation>/bin/ta_ignio_integration_add_on/

 

🌟 Did this answer help you? If so, please consider:

  • Adding karma to show it was useful
  • Marking it as the solution if it resolved your issue
  • Commenting if you need any clarification

Your feedback encourages the volunteers in this community to continue contributing

0 Karma
Get Updates on the Splunk Community!

.conf25 Community Recap

Hello Splunkers, And just like that, .conf25 is in the books! What an incredible few days — full of learning, ...

Splunk App Developers | .conf25 Recap & What’s Next

If you stopped by the Builder Bar at .conf25 this year, thank you! The retro tech beer garden vibes were ...

Congratulations to the 2025-2026 SplunkTrust!

Hello, Splunk Community! We are beyond thrilled to announce our newest group of SplunkTrust members!  The ...