Security

How Splunk run a script as an administrator?

Explorer

Hi,

How can Splunk run a script as an administrator? In our script we use devcon.exe update command so it is needed to run as admin.

Can you help us?

Best Regards,

Thank you

Tags (3)

Esteemed Legend
0 Karma

Builder

Splunk usually run the scripts with the user created to trigger the splunkd process, and all the scripts have to be placed under $Splunk_Home/bin or under app level $Splunk_Home/etc/apps/app_name/bin.

Check this answer -> https://answers.splunk.com/answers/367944/how-to-change-the-user-splunk-runs-scripts-as.html