All Apps and Add-ons

'python.version' attribute in DB Connect v3.3.0 config files on Splunk 7.x

_smp_
Builder

When I upgrade DB Connect v3.2.0 to v3.3.0 on Splunk 7.x, I get a validation error for every stanza in commands.conf and restmap.conf where there is a value for python.version. Here's an example:

Invalid key in stanza [dbxquery] in /opt/splunk/etc/apps/splunk_app_db_connect/default/commands.conf, line 3: python.version  (value:  python3).

Here's the full stanza:

[dbxquery]
run_in_preview = false
python.version = python3
filename = dbxquery_bridge.py
chunked = true

What's the right way to customize the stanza to run on 7.x in terms of the default vs. local folder? The way I understand the Python3 migration documentation, the python.version parameter wasn't introduced until 8.0. If that's the case then I need to remove the parameter, but the Clear a setting technique doesn't seem to work. I get validation errors for both the empty value and the python3 value:

[dbxquery]
python.version = 

[filterdbxsourcetype]
python.version = 

Invalid key in stanza [dbxquery] in /opt/splunk/etc/apps/splunk_app_db_connect/local/commands.conf, line 2: python.version  (value:  )
Invalid key in stanza [dbxquery] in /opt/splunk/etc/apps/splunk_app_db_connect/default/commands.conf, line 3: python.version  (value:  python3).

I don't have to hack the copy in the default folder, do I? That approach obviously goes against the best practice of only customizing files in the local folder.

arnokuijper
New Member

Is there still no workaround for this? Facing the same issue.. Splunk 7.3.3 on HF - new - no upgrade DB Connect app - 3.3.1

0 Karma

isoutamo
SplunkTrust
SplunkTrust

Hi

couldn't be sure, but I suppose that this is only “cosmetic” warning in 7.x.x versions. At least we haven’t noticed any issues based on that on test environment.


But still this should fixed in official way, as there will be a long time those 7.x.x HF’s etc which are running this for years....

r. Ismo

0 Karma

arnokuijper
New Member

Hi,

Thanks.. I just commented the version part out in the config.. Will enable it again once updated. Struggling now with the task server config.. It's not a straight fwrd app again and wonder if it's better than what we have right now.. But we have to upgrade so this is a side effect. We will solve it and make it work 🙂

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to May Tech Talks, Office Hours, and Webinars!

Take a look below to explore our upcoming Community Office Hours, Tech Talks, and Webinars this month. This ...

They're back! Join the SplunkTrust and MVP at .conf24

With our highly anticipated annual conference, .conf, comes the fez-wearers you can trust! The SplunkTrust, as ...

Enterprise Security Content Update (ESCU) | New Releases

Last month, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...