Hi,
How can Splunk run a script as an administrator? In our script we use devcon.exe update command so it is needed to run as admin.
Can you help us?
Best Regards,
Thank you
This is a thorny question; see here:
https://docs.splunk.com/Documentation/Splunk/latest/Installation/ChoosetheuserSplunkshouldrunas
Splunk usually run the scripts with the user created to trigger the splunkd process, and all the scripts have to be placed under $Splunk_Home/bin or under app level $Splunk_Home/etc/apps/app_name/bin.
Check this answer -> https://answers.splunk.com/answers/367944/how-to-change-the-user-splunk-runs-scripts-as.html