Deployment Architecture

What is the use of runScript.py?

rdzivk
New Member

Hi all,

We have noticed on our EDR some noise coming from the script C:\Program Files\Splunk\bin\runScript.py" which seems to be starting a number of btool processes.

 

Could someone tell me what's the usage of this and why it's happening?

I have tried googling to find more information but no luck.

 

Appreciate it!


0 Karma

richgalloway
SplunkTrust
SplunkTrust

The runScript.py script launches scripts on behalf of Splunk.  Rather than run the script directly, runScript is used to make Session Key and other necessary variables globally accessible rather than passed in as arguments.

I can't explain why there are so many btool processes running.  Can you tell us more about the problem?

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Index This | What is broken 80% of the time by February?

December 2025 Edition   Hayyy Splunk Education Enthusiasts and the Eternally Curious!    We’re back with this ...

Unlock Faster Time-to-Value on Edge and Ingest Processor with New SPL2 Pipeline ...

Hello Splunk Community,   We're thrilled to share an exciting update that will help you manage your data more ...

Splunk MCP & Agentic AI: Machine Data Without Limits

Discover how the Splunk Model Context Protocol (MCP) Server can revolutionize the way your organization uses ...