topic Re: DNS logs - INFO [:12345] Script exceeded maximum runtime of in Getting Data In

DNS logs - INFO [:12345] Script exceeded maximum runtime of

inventsekar — Fri, 24 Oct 2025 12:12:16 GMT

Hi Splunk Gurus,

I use the "Windows DNS Analytical Custom" app for DNS logs onboarding to Splunk Cloud.

on the DC systems, the PowerShell script runs, but it does not produce any output.

on Splunk we receive logs as "INFO [:13744] Script exceeded maximum runtime of . Terminating PID 13744"
on these logs i see the source as - source="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe -command \"& 'c:\\Program Files\\SplunkUniversalForwarder\\etc\\apps\\TA-WinDNSAnalytical-inputs\\bin\\get_dns_analytics.ps1'\" -SplunkdLogging"

one thing to note - the DC systems are pretty busy systems. maybe the script runs but timeouts(i believe). so working on increasing the "timeout" parameter in the inputs.conf file.

any other suggestions, thoughts pls, thanks.

Re: DNS logs - INFO [:12345] Script exceeded maximum runtime of

PrewinThomas — Mon, 27 Oct 2025 08:17:36 GMT

@inventsekar

On busy DCs script can take longer than the default timeout to query.

Can you run the powershell directly and see how long its taking and adjust your timeout accordingly.

& 'C:\Program Files\SplunkUniversalForwarder\etc\apps\TA-WinDNSAnalytical-inputs\bin\get_dns_analytics.ps1'

Regards,
Prewin
If this answer helped you, please consider marking it as the solution or giving a Karma. Thanks!

Re: DNS logs - INFO [:12345] Script exceeded maximum runtime of

inventsekar — Wed, 12 Nov 2025 16:22:54 GMT

We worked with Splunk Support and they suggested some editings/updates on that powershell script, which resolved this issue, hence solving this questions. thanks.

thanks @PrewinThomas .. given upvotes, thanks again.