Getting Data In

How to stop powershell running when the UF is restarted?

cpaulraj
New Member

Has anyone figured out how to run powershell only at scheduled time? In addition to scheduled time, it is running everytime the forwarder is restarted.

Labels (2)
0 Karma

cpaulraj
New Member

Thank you for your reply, we hear from support that interval attribute can be used in [script] but not in [powershell]. 

 

 

0 Karma

richgalloway
SplunkTrust
SplunkTrust

Then you'll want to look at the schedule setting, which defaults to running the script at startup.

---
If this reply helps you, Karma would be appreciated.
0 Karma

richgalloway
SplunkTrust
SplunkTrust

Check the scripted inputs for those with interval=-1.  That tells Splunk to run the script at startup.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

What You Read The Most: Splunk Lantern’s Most Popular Articles!

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

See your relevant APM services, dashboards, and alerts in one place with the updated ...

As a Splunk Observability user, you have a lot of data you have to manage, prioritize, and troubleshoot on a ...

Index This | What goes away as soon as you talk about it?

May 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this month’s ...