Check the python.log in "C:\Program Files\Splunk\var\log\splunk". this will show you what is actually being initiated by the runshellscript.py, which is what the search app uses to initiate your script. ... View more