ITSI (SA-ITOA) – pkg_resources deprecation warnings still present

Applicability

Description

Splunk IT Service Intelligence (SA-ITOA) version 4.21.2 running on Splunk 10.1 generates repeated deprecation warnings related to the Python pkg_resources package. The warnings indicate that pkg_resources is deprecated and slated for removal as early as November 30, 2025. Despite it's passed, these warnings persist in splunkd.log under ExecProcessor, originating from scripts such as itsi_content_pack_authorship.py, itsi_migration_queue.py, and itsi_backup_restore.py. The warnings include:

ERROR ExecProcessor - message from "/opt/splunk/bin/python3.9 /opt/splunk/etc/apps/SA-ITOA/bin/itsi_content_pack_authorship.py"
import pkg_resources/opt/splunk/lib/python3.9/site-packages/cherrypy/__init__.py:60:
UserWarning: pkg_resources is deprecated as an API.
The pkg_resources package is slated for removal as early as 2025-11-30.
Refrain from using this package or pin to Setuptools<81.

No functional failures have been observed, and scripts continue to execute successfully. However, the error-level log entries create noise in monitoring and raise concerns about forward compatibility.

Investigation

1. Confirm the presence of the warnings in splunkd.log under ExecProcessor.
2. Identify the source scripts generating the warnings: itsi_content_pack_authorship.py, itsi_migration_queue.py, and itsi_backup_restore.py.
3. Verify the existence of the improperly versioned dist-info directory at:
   splunk/etc/apps/SA-ITOA/lib/SA_ITOA_app_common/scp_download_simple_crypto-unknown.dist-info
4. Review the impact and confirm no functional failures occur despite the warnings.

Resolution

Workaround

1. SSH into the ITSI Search Head.
2. Navigate to the directory:

   cd /opt/splunk/etc/apps/SA-ITOA/lib/SA_ITOA_app_common

3. Backup the folder before making changes.
4. Delete the offending directory:
    

   rm -rf scp_download_simple_crypto-unknown.dist-info

5. Restart the Search Head to apply changes and monitor splunkd.log for warnings.
6. Note that this workaround removes the PkgResourcesDeprecationWarning related to the invalid version variant.

Permanent Fix :

The fix is planned for ITSI version 5.0.4, tentatively scheduled for early FY27.