splunk-powershell.exe

[prakashraja1999]

In the environment where Splunk is running, it is called "splunk-powershell.exe" The process is running.

What role does this process play? This executable file was in the following folder, When I looked up the property, there was no information. → C: \ Program Files \ SplunkUniversalForwarder \ bin \ Please tell me more about this process.

[Stefanie]

splunk-powershell.exe is used for some of the modular inputs for windows specific devices.

If you look in a inputs.conf on your Universal Forwarder, there are stanzas that start with [powershell://.............................] 

That is what splunk-powershell.exe references.