Security

How Splunk run a script as an administrator?

mesutu
Explorer

Hi,

How can Splunk run a script as an administrator? In our script we use devcon.exe update command so it is needed to run as admin.

Can you help us?

Best Regards,

Thank you

Tags (3)

woodcock
Esteemed Legend
0 Karma

ivanreis
Builder

Splunk usually run the scripts with the user created to trigger the splunkd process, and all the scripts have to be placed under $Splunk_Home/bin or under app level $Splunk_Home/etc/apps/app_name/bin.

Check this answer -> https://answers.splunk.com/answers/367944/how-to-change-the-user-splunk-runs-scripts-as.html

Get Updates on the Splunk Community!

Splunk Forwarders and Forced Time Based Load Balancing

Splunk customers use universal forwarders to collect and send data to Splunk. A universal forwarder can send ...

NEW! Log Views in Splunk Observability Dashboards Gives Context From a Single Page

Today, Splunk Observability releases log views, a new feature for users to add their logs data from Splunk Log ...

Last Chance to Submit Your Paper For BSides Splunk - Deadline is August 12th!

Hello everyone! Don't wait to submit - The deadline is August 12th! We have truly missed the community so ...