Splunk Enterprise

App with deprecated Python

wines
New Member

After upgrading Splunk from 8 to 9 version I've started to receive messages :

" The Upgrade Readiness App detected 1 app with deprecated Python: splunk-rolling-upgrade "

Can't find this app Splunkbase | apps.

As far as I understand it's Splunk buit-in app?

Should I delete it or how can I resolve this issue ?

P"lease help.

Labels (2)
0 Karma

wines
New Member

I've downloaded latest Splunk installation package, extracted app files and replaced old files in my installation. But it does not hepl.

0 Karma

dural_yyz
Motivator

Compare the contents of the "splunk/etc/apps/splunk-rolling-upgrade" against the manifest file.  Some previous files may be left behind after the upgrade and triggering the python 2 warning.  If any have the same name you may need to manually copy from the v9 Splunk extracted to a safe location.

0 Karma

dsky55
Explorer

What manifest file?  There exists an "app.manifest" file in several apps but not all of them.
The app that is being flagged on my splunk enterprise is "config_explorer" and it has an "app.manifest" file.
splunk-rolling-upgrade/ does not have an "app.manifest" file, it does however, have a 
"lib/splunkupgrade/downloader/manifest.py" file.

Please, if someone understands this, please elaborate on what two manifest files to compare.

0 Karma

dural_yyz
Motivator

I have Splunk 9.4 installed and this is the file in the root $SPLUNK_HOME folder.

splunk-9.4.0-6b4ebe426ca6-windows-x64-manifest

That file name changes based on the version you have installed.  Inside that file is a list of ~30K files with expected owner and permissions.  The health check verifies against all of the contents but only on Splunk restart.

0 Karma

sir_swade
New Member

I am getting the same error as the original post and tried your suggestions.  I am still getting an email alert with this error.  My Splunk search has only has Python 3.9.18 installed.  Any other suggestions to fix this error?

0 Karma
Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Dynamic formatting from XML events

This challenge was first posted on Slack #puzzles channelFor a previous puzzle, I needed a set of fixed-length ...

Enter the Agentic Era with Splunk AI Assistant for SPL 1.4

  🚀 Your data just got a serious AI upgrade — are you ready? Say hello to the Agentic Era with the ...

Stronger Security with Federated Search for S3, GCP SQL & Australian Threat ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...