Splunk Enterprise

splunk-powershell.exe

prakashraja1999
Loves-to-Learn Everything

In the environment where Splunk is running, it is called "splunk-powershell.exe" The process is running.

What role does this process play? This executable file was in the following folder, When I looked up the property, there was no information. → C: \ Program Files \ SplunkUniversalForwarder \ bin \ Please tell me more about this process.

0 Karma

Stefanie
Builder

splunk-powershell.exe is used for some of the modular inputs for windows specific devices.

If you look in a inputs.conf on your Universal Forwarder, there are stanzas that start with [powershell://.............................] 

That is what splunk-powershell.exe references.

0 Karma
Get Updates on the Splunk Community!

AppDynamics Summer Webinars

This summer, our mighty AppDynamics team is cooking up some delicious content on YouTube Live to satiate your ...

SOCin’ it to you at Splunk University

Splunk University is expanding its instructor-led learning portfolio with dedicated Security tracks at .conf25 ...

Credit Card Data Protection & PCI Compliance with Splunk Edge Processor

Organizations handling credit card transactions know that PCI DSS compliance is both critical and complex. The ...