After upgrading Splunk from 8 to 9 version I've started to receive messages :
" The Upgrade Readiness App detected 1 app with deprecated Python: splunk-rolling-upgrade "
Can't find this app Splunkbase | apps.
As far as I understand it's Splunk buit-in app?
Should I delete it or how can I resolve this issue ?
P"lease help.
I've downloaded latest Splunk installation package, extracted app files and replaced old files in my installation. But it does not hepl.
Compare the contents of the "splunk/etc/apps/splunk-rolling-upgrade" against the manifest file. Some previous files may be left behind after the upgrade and triggering the python 2 warning. If any have the same name you may need to manually copy from the v9 Splunk extracted to a safe location.
What manifest file? There exists an "app.manifest" file in several apps but not all of them.
The app that is being flagged on my splunk enterprise is "config_explorer" and it has an "app.manifest" file.
splunk-rolling-upgrade/ does not have an "app.manifest" file, it does however, have a
"lib/splunkupgrade/downloader/manifest.py" file.
Please, if someone understands this, please elaborate on what two manifest files to compare.
I have Splunk 9.4 installed and this is the file in the root $SPLUNK_HOME folder.
splunk-9.4.0-6b4ebe426ca6-windows-x64-manifest
That file name changes based on the version you have installed. Inside that file is a list of ~30K files with expected owner and permissions. The health check verifies against all of the contents but only on Splunk restart.
I am getting the same error as the original post and tried your suggestions. I am still getting an email alert with this error. My Splunk search has only has Python 3.9.18 installed. Any other suggestions to fix this error?