I just had to fix/re-configure for this very issue: There are TWO methods to successfully control the python version in Splunk 8.x. Global (all apps by default will use this setting): /system/local/server.conf - [general] python.version = python2 Note: Your options are python.version = {default|python|python2|python3} App-specific: /{some app i.e. eventgen}/local/app.conf [install] python.version = python2 Two hints: 1) Be very careful to place the python.version statement in the correct stanza given the .conf file (see docs for more info) 2) I highly recommend using the app-specific method as the global method will almost certainly cause issues with new Splunk apps (including your own) which require py3. I hope this is helpful. Gregg -- TMM: Platforms, IoT, and Verticals
... View more