All Apps and Add-ons

Splunk on Windows - error 'cscript' is not recognized

duncanuno
Explorer

I have just installed Splunk on Windows 2008R2 and wish to collect Netflow data - installed Netflow Integrator.

When attempting to configure "Netflow Integrator Server Configuration" I get an error just below "Netflow Integrator Server Status" and just above the 3 icons for Start, Stop and Restart

Error
'cscript' is not recognized as an internal or external command, operable program or batch file.

No helpful errors generated that I can find. Server has been restarted more than once, no difference.
Any ideas?

0 Karma
1 Solution

NetFlow_Logic
Contributor

Cscript.exe is a command-line version of the Windows Script Host that provides command-line options for setting script properties. Please check that you have it here %systemroot%\system32\cscript.exe.

Then make sure the “NetFlow Integrator” user (Splunk user) has access rights to run it.

If you require any additional assistance, please submit a request at:
https://netflowlogic.zendesk.com/anonymous_requests/new

View solution in original post

0 Karma

NetFlow_Logic
Contributor

Cscript.exe is a command-line version of the Windows Script Host that provides command-line options for setting script properties. Please check that you have it here %systemroot%\system32\cscript.exe.

Then make sure the “NetFlow Integrator” user (Splunk user) has access rights to run it.

If you require any additional assistance, please submit a request at:
https://netflowlogic.zendesk.com/anonymous_requests/new

0 Karma

duncanuno
Explorer

I have created another machine with fewer restrictions and resolved this problem. Will have to spend some time to work out why additional security restrictions on server have broken the execution of cscript.exe when all appears to be in order.

duncanuno
Explorer

Thanks for that.

Environment variables appear correct -
%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\

Running in a non AD windows server, logged in a local admin

Confirmed that cscript.exe has read & execute permission for Splunk user

Will pursue the permissions angle

Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

[Puzzles] Solve, Learn, Repeat: Character substitutions with Regular Expressions

This challenge was first posted on Slack #puzzles channelFor BORE at .conf23, we had a puzzle question which ...

Splunk Community Badges!

  Hey everyone! Ready to earn some serious bragging rights in the community? Along with our existing badges ...

[Puzzles] Solve, Learn, Repeat: Matching cron expressions

This puzzle (first published here) is based on matching timestamps to cron expressions.All the timestamps ...