How Splunk run a script as an administrator?

[mesutu]

Hi,

How can Splunk run a script as an administrator? In our script we use devcon.exe update command so it is needed to run as admin.

Can you help us?

Best Regards,

Thank you

[woodcock]

This is a thorny question; see here:
https://docs.splunk.com/Documentation/Splunk/latest/Installation/ChoosetheuserSplunkshouldrunas

[ivanreis]

Splunk usually run the scripts with the user created to trigger the splunkd process, and all the scripts have to be placed under $Splunk_Home/bin or under app level $Splunk_Home/etc/apps/app_name/bin.

Check this answer -> https://answers.splunk.com/answers/367944/how-to-change-the-user-splunk-runs-scripts-as.html