- Apps and Add-ons
- :
- All Apps and Add-ons
- :
- Splunk on Windows - error 'cscript' is not recogni...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark Topic
- Subscribe to Topic
- Mute Topic
- Printer Friendly Page
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have just installed Splunk on Windows 2008R2 and wish to collect Netflow data - installed Netflow Integrator.
When attempting to configure "Netflow Integrator Server Configuration" I get an error just below "Netflow Integrator Server Status" and just above the 3 icons for Start, Stop and Restart
Error
'cscript' is not recognized as an internal or external command, operable program or batch file.
No helpful errors generated that I can find. Server has been restarted more than once, no difference.
Any ideas?
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Cscript.exe is a command-line version of the Windows Script Host that provides command-line options for setting script properties. Please check that you have it here %systemroot%\system32\cscript.exe.
Then make sure the “NetFlow Integrator” user (Splunk user) has access rights to run it.
If you require any additional assistance, please submit a request at:
https://netflowlogic.zendesk.com/anonymous_requests/new
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Cscript.exe is a command-line version of the Windows Script Host that provides command-line options for setting script properties. Please check that you have it here %systemroot%\system32\cscript.exe.
Then make sure the “NetFlow Integrator” user (Splunk user) has access rights to run it.
If you require any additional assistance, please submit a request at:
https://netflowlogic.zendesk.com/anonymous_requests/new
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have created another machine with fewer restrictions and resolved this problem. Will have to spend some time to work out why additional security restrictions on server have broken the execution of cscript.exe when all appears to be in order.
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks for that.
Environment variables appear correct -
%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\
Running in a non AD windows server, logged in a local admin
Confirmed that cscript.exe has read & execute permission for Splunk user
Will pursue the permissions angle
More Ways To Control Your Costs With Archived Metrics | Register for Tech Talk
.conf24 | Personalize your .conf experience with Learning Paths!
Threat Hunting Unlocked: How to Uplevel Your Threat Hunting With the PEAK Framework ...
