Security

How Splunk run a script as an administrator?

mesutu
Explorer

Hi,

How can Splunk run a script as an administrator? In our script we use devcon.exe update command so it is needed to run as admin.

Can you help us?

Best Regards,

Thank you

Tags (3)

woodcock
Esteemed Legend
0 Karma

ivanreis
Builder

Splunk usually run the scripts with the user created to trigger the splunkd process, and all the scripts have to be placed under $Splunk_Home/bin or under app level $Splunk_Home/etc/apps/app_name/bin.

Check this answer -> https://answers.splunk.com/answers/367944/how-to-change-the-user-splunk-runs-scripts-as.html

Get Updates on the Splunk Community!

Why You Can't Miss .conf25: Unleashing the Power of Agentic AI with Splunk & Cisco

The Defining Technology Movement of Our Lifetime The advent of agentic AI is arguably the defining technology ...

Deep Dive into Federated Analytics: Unlocking the Full Power of Your Security Data

In today’s complex digital landscape, security teams face increasing pressure to protect sprawling data across ...

Your summer travels continue with new course releases

Summer in the Northern hemisphere is in full swing, and is often a time to travel and explore. If your summer ...