#Splunk phantom python install

Verify it by running the compatible Python 3 equivalent script for _connector. Otherwise, the platform will accept a Python 3 app that only defines pip_dependencies if the dependencies are the same.Īfter completing all the steps on this page, verify if your code is syntactically correct. You only need to define pip3_dependencies if your app has a different set of dependencies when running in Python 3 than when running in Python 2.

#Splunk phantom python install

If your converted app has a dependency with functionally-equivalent versions, one of which is only available for Python 2 and the other for Python 3, then you might need to define pip3_dependencies in the app JSON alongside pip_dependencies so that the platform will install the different versions as needed. If your app has custom views or its own REST handler, it needs to be compatible with Python 2 and ship with the source until a future release of Splunk Phantom when the entire platform is fully python3 compatible. In the case of converting an app that is compatible with current and older versions of Splunk Phantom, there are multiple dependencies to consider. If you downgrade and go back to using the Python 2 version in the UI, it automatically runs the Python 2 code. It is possible to switch back and forth in the UI between the app version that uses Python 2 & the version that uses Python 3.

As long as the number is higher, the UI understands that it's an upgrade. Overview Splunk Phantom combines security infrastructure orchestration, playbook automation and case management capabilities to streamline your team, processes and tools. The app_version key accepts any update, such as from 1.0.0 to 1.0.1 or from 1.0.0 to 2.0.0.