I'm trying to account for a number of Splunk configurations on a domain controller and I was trying to figure out what the splunk-wmi.path script was that points to splunk-wmi.exe. I wasn't sure if this was something that Splunk automatically configured or if sys admins prior to me wrote this custom.
Trying to figure out if I need to account for this configuration or not.
Splunk-wmi.path script contains the below configuration.
As for the script location goes, ideally, it should be placed under "$SPLUNK_HOME\bin\scripts" by default. This is a default Splunk configuration and placing this in a different location might not work always.