Splunk 10.4 Default Python interpreter from version 3.9 to version 3.13

Applicability

Description

Splunk has updated the default Python interpreter from version 3.9 to version 3.13. This update does not change which Python interpreter gets runs or how the platform selects an interpreter selection in the platform is handled to use. The Upgrade Readiness and App Inspect checks will now present warnings if the platform is configured to use Python version 3.9  Users must use this opportunity to upgrade  apps and scripts to use Python 3.13 so that when Python 3.9 is removed in the following release, the apps don’t break. 

Investigation

Affected Parties:  Splunk instances with apps and TAs that rely on Python to run. 

The following guidance can be followed to mitigate potential impacts with this change: Python compatibility in Splunk apps

This change is purely logical and will not change the behavior within Splunk itself.
The Readiness and App Inspect checks will begin to WARN about the continued use of Python 3.9 and the lack of interpreter definition within the new python.required field. 

The check should be ran on EVERY search head  ES/AHOC/ITSI. Apps can be installed on specific SH which mean this check will only be valid for the search head the check is ran on . 

Resolution

Mitigation guidance: Upgrade your apps and scripts to use Python version 3.13 so that when Splunk eventually removes support for version 3.9, your apps don't break. Use the python.required setting in various configuration files to explicitly declare support for Python version 3.13. 

Related Links

Preparing to upgrade from 10.0 to Splunk Enterprise and Cloud Platform 10.4