topic Re: How to stop powershell running when the UF is restarted? in Getting Data In

How to stop powershell running when the UF is restarted?

cpaulraj — Thu, 14 Nov 2024 15:24:39 GMT

Has anyone figured out how to run powershell only at scheduled time? In addition to scheduled time, it is running everytime the forwarder is restarted.

Re: How to stop powershell running when the UF is restarted?

richgalloway — Thu, 14 Nov 2024 16:07:50 GMT

Check the scripted inputs for those with interval=-1. That tells Splunk to run the script at startup.

Re: How to stop powershell running when the UF is restarted?

cpaulraj — Thu, 14 Nov 2024 16:23:06 GMT

Thank you for your reply, we hear from support that interval attribute can be used in [script] but not in [powershell].

Re: How to stop powershell running when the UF is restarted?

richgalloway — Thu, 14 Nov 2024 17:42:52 GMT

Then you'll want to look at the schedule setting, which defaults to running the script at startup.