Splunk Dev

python version (and libraries) installed with a lightweight forwarder for running Scripted Inputs?

Justin_Grant
Contributor

What version of Python is used to run Splunk 4.1.x. scripted inputs?

Which Python libraries are available for use in scripted inputs-- and which libraries (of those which I might normally expect to be available) are not available?

Which libraries (if any) have been modified by Splunk and so have different behavior than I'd expect from a regular Python distro?

0 Karma
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

The exact version varies with the exact version of Splunk, but for Splunk 4.1 thru 4.1.2, the version is 2.6.4. You can expect with later versions that there may be later 2.x Python. You can tell for any version by just running $SPLUNK_HOME/bin/splunk cmd python --version. I do not know if or when we will include Python 3.0 with Splunk instead, but it is likely that we will be sticking with 2.x for a very long time.

All Python standard libraries are included. Additionally, you can see what comes with Splunk by looking in $SPLUNK_HOME/lib/python2.6/site-packages (%SPLUNK_HOME\Python-2.6\Lib\site-packages on Windows. However, it can not be guaranteed that all packages shipped with Splunk will continue to be available in all future versions.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

The exact version varies with the exact version of Splunk, but for Splunk 4.1 thru 4.1.2, the version is 2.6.4. You can expect with later versions that there may be later 2.x Python. You can tell for any version by just running $SPLUNK_HOME/bin/splunk cmd python --version. I do not know if or when we will include Python 3.0 with Splunk instead, but it is likely that we will be sticking with 2.x for a very long time.

All Python standard libraries are included. Additionally, you can see what comes with Splunk by looking in $SPLUNK_HOME/lib/python2.6/site-packages (%SPLUNK_HOME\Python-2.6\Lib\site-packages on Windows. However, it can not be guaranteed that all packages shipped with Splunk will continue to be available in all future versions.

Lowell
Super Champion

Just FYI. The full distutils are not available out of the box. This really only matters if you are trying to build python packages. (I'm a little bit unclear which parts of distutils are part of the "standard libraries" and which parts are not, I just know that running python setup.py build doesn't work out of the box.)

Get Updates on the Splunk Community!

Join Us for Splunk University and Get Your Bootcamp Game On!

If you know, you know! Splunk University is the vibe this summer so register today for bootcamps galore ...

.conf24 | Learning Tracks for Security, Observability, Platform, and Developers!

.conf24 is taking place at The Venetian in Las Vegas from June 11 - 14. Continue reading to learn about the ...

Announcing Scheduled Export GA for Dashboard Studio

We're excited to announce the general availability of Scheduled Export for Dashboard Studio. Starting in ...