All Apps and Add-ons

Can AWS CLI be configured to use the Python that comes with Splunk?

MikeBertelsen
Communicator

When I run the cli below it works but fails because the python version on the Linux server is 2.6.6.
AWS_ACCESS_KEY_ID=... AWS_SECRET_ACCESS_KEY=... aws s3 sync /opt/splunk/aws_cisco/ s3://cisco-managed-us.../...

see https://urllib3.readthedocs.io/en/latest/advanced-usage.html#ssl-warnings
SNIMissingWarning

But Splunk is using version 2.7.13 which per the link above would work.
Is there a way to run the cli via a splunk cmd? My attempts have failed so far.

Tags (2)
0 Karma

MikeBertelsen
Communicator

Whereas it probably can be done the final 'supported' solution was the python3 for RHEL6.
There is also a side note regarding syntax:
AWS_ACCESS_KEY_ID=... AWS_SECRET_ACCESS_KEY=... aws s3 sync /opt/splunk/aws_cisco/ s3://cisco-managed-us.../...
should have been written as:
AWS_ACCESS_KEY_ID=... AWS_SECRET_ACCESS_KEY=... aws s3 sync s3://cisco-managed-us.../.../ /opt/splunk/aws_cisco/

Because the goal was to sync the s3 bucket to the local storage at which point Splunk could read the files in the local storage and ingest the desired data.

0 Karma

amiracle
Splunk Employee
Splunk Employee

Why not upgrade the version of python on the linux server? I don't think pathing it through Splunk would work due to the aws cli possible dependencies.

0 Karma

MikeBertelsen
Communicator

It has to be a version that RHEL supports.
Per a server tech "Red Hat has another Repo that has python3 for RHEL6 in it" so we are checking that now

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...