Hi, I want to run a Powershell script on a Windows universal forwarder according to a cron schedule. My input looks similar to this [powershell://Test] script = . "$SplunkHome\etc\apps\test\bin\test.ps1" schedule = */15 * * * * index = test Besides running every 15 minutes as it should, I noticed that the script also runs every time when Splunk starts. Reading https://docs.splunk.com/Documentation/Splunk/latest/Admin/Inputsconf it says: "Regardless of which option you choose, the command or script always runs once when the instance starts." I don't want that. I don't want the script to run when Splunk starts. Is there any way to disable that?
... View more