Splunk Dev

python version (and libraries) installed with a lightweight forwarder for running Scripted Inputs?

Justin_Grant
Contributor

What version of Python is used to run Splunk 4.1.x. scripted inputs?

Which Python libraries are available for use in scripted inputs-- and which libraries (of those which I might normally expect to be available) are not available?

Which libraries (if any) have been modified by Splunk and so have different behavior than I'd expect from a regular Python distro?

0 Karma
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

The exact version varies with the exact version of Splunk, but for Splunk 4.1 thru 4.1.2, the version is 2.6.4. You can expect with later versions that there may be later 2.x Python. You can tell for any version by just running $SPLUNK_HOME/bin/splunk cmd python --version. I do not know if or when we will include Python 3.0 with Splunk instead, but it is likely that we will be sticking with 2.x for a very long time.

All Python standard libraries are included. Additionally, you can see what comes with Splunk by looking in $SPLUNK_HOME/lib/python2.6/site-packages (%SPLUNK_HOME\Python-2.6\Lib\site-packages on Windows. However, it can not be guaranteed that all packages shipped with Splunk will continue to be available in all future versions.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

The exact version varies with the exact version of Splunk, but for Splunk 4.1 thru 4.1.2, the version is 2.6.4. You can expect with later versions that there may be later 2.x Python. You can tell for any version by just running $SPLUNK_HOME/bin/splunk cmd python --version. I do not know if or when we will include Python 3.0 with Splunk instead, but it is likely that we will be sticking with 2.x for a very long time.

All Python standard libraries are included. Additionally, you can see what comes with Splunk by looking in $SPLUNK_HOME/lib/python2.6/site-packages (%SPLUNK_HOME\Python-2.6\Lib\site-packages on Windows. However, it can not be guaranteed that all packages shipped with Splunk will continue to be available in all future versions.

Lowell
Super Champion

Just FYI. The full distutils are not available out of the box. This really only matters if you are trying to build python packages. (I'm a little bit unclear which parts of distutils are part of the "standard libraries" and which parts are not, I just know that running python setup.py build doesn't work out of the box.)

Career Survey
First 500 qualified respondents will receive a $20 gift card! Tell us about your professional Splunk journey.
Get Updates on the Splunk Community!

Thanks for the Memories! Splunk University, .conf25, and our Community

Thank you to everyone in the Splunk Community who joined us for .conf25, which kicked off with our iconic ...

Data Persistence in the OpenTelemetry Collector

This blog post is part of an ongoing series on OpenTelemetry. What happens if the OpenTelemetry collector ...

Introducing Splunk 10.0: Smarter, Faster, and More Powerful Than Ever

Now On Demand Whether you're managing complex deployments or looking to future-proof your data ...