●Change8

Migrating to Splunk SDK 3.0.0

Version 3.0.0 introduces 2 breaking changes. This guide details how to update your code.

Released: 5/12/2026

2
Breaking Changes
2
Migration Steps
15
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

ResultsReadersixstorage/passwords.encr_passwordModularInput.validate_inputrequestservice.patchservice.putToolResult.contentAgentState.responseAgentState.messagesLC_ToolCallSubagentTextResultthread_idStructuredOutputRetryLimitMiddlewareTimeoutLimitMiddleware

Breaking Changes

●Issue #1

Removed `ResultsReader` class, which was likely used for iterating over search results.

●Issue #2

Removed `six` dependency, indicating removal of Python 2 compatibility code.

Migration Steps

  1. 1
    If you were using `ResultsReader`, you must update your result iteration logic.
  2. 2
    If you were relying on the `encr_password` field for storage passwords, find its replacement as it is deprecated.

Release Summary

This release introduces major new functionality for integrating LLMs with Splunk Apps and includes significant internal modernization, dependency updates, and the removal of legacy components like `ResultsReader`.

Need More Details?

View the full release notes and all changes for Splunk SDK 3.0.0.

View Full Changelog