Specify what account executes a PowerShell script

Splunk Search

I like to run PowerShell scripts under "Powershell v3 Modular Input" and created a script. I noticed via our HIPS block log that the PowerShell script is executed under the same service account as Splunk is running under.

Is there a way to define a different service account that runs the PowerShell?

Get Updates on the Splunk Community!

Supercharging Windows Security Detection Performance: Introducing Hybrid Field ...

Windows event logs—from Security auditing and Sysmon to PowerShell script blocks—form the operational backbone ...

Enriching Signals with the OTel Lookup Processor

Introduction Raw telemetry is often incomplete. A log line might record an IP address, but what you really ...

Meet the .conf26 AI Agent Buildathon Winners

At the .conf26 AI Agent Buildathon, Splunk users turned their operational expertise into working AI agents ...