Removing Python® 2 from New Splunk Cloud and Splunk Enterprise Releases Starting Fall 2021

As Splunk Cloud and Splunk Enterprise continue to accelerate feature rollout with new technologies, the time has come to say goodbye to old technologies. Python 2 will be removed from all new Splunk Enterprise releases beginning on September 1st, 2021 and Splunk Cloud releases beginning November 1st, 2021, which impacts all applications that run on those platforms — such as Splunk IT Service Intelligence, Splunk Enterprise Security, Machine Learning Toolkit, Splunkbase applications, and private applications. This means that all apps that are only compatible with Python 2 will not work on Splunk Cloud and Enterprise versions released after this date. As a reminder, the Python Software Foundation declared Python 2 End-of-Life as of January 1, 2020.

If any of your applications are still using Python 2 that you want to continue using in Splunk — especially any private apps — you must transition these to be compatible with Python 3 immediately. This can be done by using dual-compatible Python libraries, such as Six, to maintain backward and forward compatibility. This entails migrating all apps to use Python 3 and setting the default Python runtime per-script, and upgrading all Splunkbase apps to 8.x-compatible versions. Splunkbase applications that are not compatible with 8.x (and hence, Python 3) in Splunk Cloud will have to be removed.

Once Python 2 is removed, all Python scripts will be forced to run against the Python 3 runtime. For all private applications, you are encouraged to explicitly set the Python runtime against Python 3 once making your app dual-compatible, to start using Python 3 immediately and allow for clear tracking of actual Python 3 readiness.

What Does This Mean for Splunk Cloud Admins?

If your Splunk Cloud environment is still using Python 2 by November 1st, 2021, it may stop receiving new releases. As a reminder, all Splunk Cloud and Splunk Enterprise versions since 8.0.0 ship with both Python 2 and Python 3 interpreters. You will receive a series of Service Bulletins from Splunk Cloud reminding you of the removal date, any Python 2 usage that Splunk detected, and instructions on how to confirm full Python 3 app readiness for confidence in migrations.

Note: If you are using any Splunkbase applications that are stated as compatible with at least one 8.x version, the developer has certified that it is Python 3 compatible.

To help you on this journey, the following resources are available:

What Does This Mean for Customer-Managed Splunk Enterprise Admins?

Python 2 will be removed from all new Splunk Enterprise releases beginning on September 1st, 2021. To help you on your journey, the following resources are available:

Note: If you are using any Splunkbase applications that are stated as compatible with at least one 8.x version, the developer has certified that it is Python 3 compatible.

What Does This Mean for Developers & Partners?

The time has finally come, Python 2 is going away! If you haven’t already, now is the time to make all of your applications compatible with Python 3. As a reminder, all developers publishing apps to Splunkbase must make their apps Python 3 compatible (ideally via dual-compatible libraries) to publish on Splunkbase.

Note: Any applications that are only compatible via 7.x (and thus, Python 2) will be blocked from installation on new Splunk Cloud releases.

As a reminder, the following resources are available as you migrate your app compatibility:

Admins, developers, and partners: thank you for your work, and we look forward to a Python 2-free future!

- Splunk Product Management & Product Marketing

Related Articles

Announcing the General Availability of Splunk POD: Unlock the Power of Your Data with Ease
Platform
2 Minute Read

Announcing the General Availability of Splunk POD: Unlock the Power of Your Data with Ease

Splunk POD is designed to simplify your on-premises data analytics, so you can focus on what really matters: making smarter, faster decisions that drive your business forward.
Introducing the New Workload Dashboard: Enhanced Visibility, Faster Troubleshooting, and Deeper Insights
Platform
3 Minute Read

Introducing the New Workload Dashboard: Enhanced Visibility, Faster Troubleshooting, and Deeper Insights

Announcing the general availability of the new workload dashboard – a modern and intuitive dashboard experience in the Cloud Monitoring Console app.
Leading the Agentic AI Era: The Splunk Platform at Cisco Live APJ
Platform
5 Minute Read

Leading the Agentic AI Era: The Splunk Platform at Cisco Live APJ

The heart of our momentum at Cisco Live APJ is our deeper integration with Cisco, culminating in the Splunk POD and new integrations, delivering unified, next-generation data operations for every organization.
Dashboard Studio: Token Eval and Conditional Panel Visibility
Platform
4 Minute Read

Dashboard Studio: Token Eval and Conditional Panel Visibility

Dashboard Studio in Splunk Cloud Platform can address more complex use cases with conditional panel visibility, token eval, and custom visualizations support.
Introducing Resource Metrics: Elevate Your Insights with the New Workload Dashboard
Platform
4 Minute Read

Introducing Resource Metrics: Elevate Your Insights with the New Workload Dashboard

Introducing Resource Metrics in Workload Dashboard (WLD) – a modern and intuitive monitoring experience in the Cloud Monitoring Console (CMC) app.
Powering AI Innovation with Splunk: Meet the Cisco Data Fabric
Platform
3 Minute Read

Powering AI Innovation with Splunk: Meet the Cisco Data Fabric

The Cisco Data Fabric brings AI-centric advancements to the Splunk Platform, seamlessly connecting knowledge, business, and machine data.
Remote Upgrader for Windows Is Here: Simplifying Fleet-Wide Forwarder Upgrades
Platform
3 Minute Read

Remote Upgrader for Windows Is Here: Simplifying Fleet-Wide Forwarder Upgrades

Simplify fleet-wide upgrades of Windows Universal Forwarders with Splunk Remote Upgrader—centralized, signed, secure updates with rollback, config preservation, and audit logs.
Dashboard Studio: Spec-TAB-ular Updates
Platform
3 Minute Read

Dashboard Studio: Spec-TAB-ular Updates

Splunk Cloud Platform 10.0.2503 includes a number of enhancements related to tabbed dashboards, trellis for more charts, and more!
Introducing Edge Processor for Splunk Enterprise: Data Management on Your Premises
Platform
2 Minute Read

Introducing Edge Processor for Splunk Enterprise: Data Management on Your Premises

Announcing the introduction of Edge Processor for Splunk Enterprise 10.0, designed to help customers achieve greater efficiencies in data transformation and improved visibility into data in motion.