Apps failing Python upgrade readiness

Applicability

Description

Splunk supported add-ons were failing the Python upgrade readiness test even though they were on the latest version due to wrong version on in the splunkabse_app.csv

For Splunk Cloud stacks users can check app version by follow instructions to upgrade in the UI. If you run into any issues upgrading apps, please open a support case. 

Investigation

1. Multiple add-ons were failing the Python upgrade readiness test when the compatibility test was run. 

2. Few of the add-ons which failed the test were on the latest version and few of them were not on the latest version.

3. Next, upgrade the add-ons to latest version as per Splunkbase, and run the python readiness app again. 

MITRE ATT&CK Heatmap for Splunk -1.8.1--->Latest
Palo Alto Network Add- on -8.1.3--->Latest
Tenable add- on for Splunk -6.3.6--->Latest
Splunk Common Information Model-5.3.1--->Latest
Lookup Editor -4.0.2--->Latest

4. Even after upgrading the add-ons to latest version as per Splunkbase, the same set of add-ons again failed the Python compatibility test.

5. On checking the version of the add-ons under splunkbase_apps.csv, could see that even though the apps are on the latest version, the splunkbase_app.csv was not updated and had the older version of the add-ons.

Resolution

Go to the below csv location and edit the csv to add the latest version of the respective app as per Splunkbase

./opt/splunk/etc/apps/python_upgrade_readiness_app/local/app_list/
splunkbaseapps_<epochtime>.csv

Edit the csv and change the version number to the latest version of all the apps that are failing the test

Do the VI edit by navigating to this location/path:

To upgrade to the latest version of AnyDesk for Splunk, select the URL below: 

TA-AnyDesk, AnyDesk Add-on for Splunk

For Splunk Cloud, users can log into their cloud stack instance and select the update version. 

To upgrade or download app: 

1. Log into cloud instance
2. Navigate to Apps > manage apps > locate the app
3. Select the link to update version or download app from Splunkbase. 

Note: The highlighted part is the add-on version which needs to be edited.