topic Re: Why are certain Powershell scripts running and others not? in Getting Data In

Why are certain Powershell scripts running and others not?

damo66a — Tue, 01 Nov 2022 04:20:30 GMT

I'm trying to get data in from a server via a powershell script. I have another app already doing similar on the same server but for some reason (that is driving me up the wall) i constantly get the error:

ERROR Executing script=. "$SplunkHome\etc\apps\vmwareinventory\appserver\static\vmguests.ps1" for stanza=VMWare-Guests failed with exception=The system cannot find the path specified.

I have checked and double checked the spellings, the system variables (for Splunk_Home), renamed the files, the directories and still it comes up with this error. I have followed the instructions to the letter from the Splunk Documentation and still the error persists.

This is my input stanza:

[powershell://VMWare-Guests] script = . "$SplunkHome\etc\apps\vmwareinventory\appserver\static\vmguests.ps1" schedule = 30 0 * * * sourcetype = vm:inventory index = vmware disabled = false

Can someone please tell me why this would be happening with this script but not others on the same server?

TIA

Re: Why are certain Powershell scripts running and others not?

gcusello — Tue, 01 Nov 2022 06:56:24 GMT

Hi @damo66a,

the variables is "$SPUNK_HOME" and not "$SplunkHome", please try using the correct variables or the absolute path.

Ciao.

Giuseppe

Re: Why are certain Powershell scripts running and others not?

damo66a — Tue, 01 Nov 2022 10:18:09 GMT

Hi @gcusello

Thanks for your input. In terms of correct variables, this is what is in the instructions on the Splunk Documentation located here

I will try what you say but I have simply followed the instructions.

Re: Why are certain Powershell scripts running and others not?

gcusello — Wed, 02 Nov 2022 07:38:38 GMT

Hi @damo66a,

I'm not a PowerShell expert, but let me know if you solved changing the variable.

Ciao.

Giuseppe

Re: Why are certain Powershell scripts running and others not?

damo66a — Mon, 07 Nov 2022 09:02:57 GMT

so i changed the variable and it made no difference. we're still getting the same "cannot find file specified" error.

we do have other scripts running on this server by Splunk so its somewhat confusing.

Re: Why are certain Powershell scripts running and others not?

gcusello — Mon, 07 Nov 2022 11:24:28 GMT

Hi @damo66a,

have you seen the Splunk TA Windows (https://splunkbase.splunk.com/app/742)?

then in splunkbase there's this app that I never used Hurricane Labs Add-on for Windows PowerShell Transcript (https://splunkbase.splunk.com/app/4984) that maybe can help you.

Ciao.

Giuseppe