Running splunk command returns no output

[gekoner]

V4.1.6 - When running a batch command 'splunk list forwarder-server' as the splunk service, which is running as LocalSystem.
No error are returned, it just doesn't output anything either to the screen or to a file, unless I run the batch as a users with an interactive session.
Other splunk commands run without issue.

Does anyone have a good work around for this?

[gekoner · Accepted solution]

This command is not supported from a non-interactive session. You must be logged in as a user to run this command. if I was running my LFC as a user account in the Windows Service this would work. But since Splunk is running as Local System, it doesn't produce any output. This is a security "feature", but the funny thing is other Splunk commands are allowed, so I'm not sure why this and other outputs are not allowed.

[MBerikcurtis]

using netstat from a command prompt, do you see the forwarder ports open? default is 9997.

[gekoner]

I see the LFC communicating to the Indexer on 9997 (Foreign Address). I don't see the client listing on 9997 (Local Address). If you thought the issue was that the client isn't communicating to the indexer, that isn't my issue. See my post. It is just this command not producing output, not locally to a file or ECHO to the screen.