I have a PowerShell script that needs to be ran as admin to be able to load in all of the data. It returns a .csv file that exports to the lookups folder so that we can pull out the data and use said data. I have the script in the correct directory in the Splunk server and can see it and I can run it but I'm not getting data out of it which is making me think that the script is not being ran as an admin. I've tried a few things but can't get it to work correctly. I've come to a couple of different options for what to do here. 1. Make a managed service account that runs the script as an admin. 2. Try to configure splunkd to allow running as admin (if possible?) 3. Other recommendations? I'm relatively new to Splunk. Just trying to learn all I can and I appreciate any pointers/guidance.  ... View more

We got the email alert notifications running in Splunk and the configuration the same across all of the alerts but only some of them actually send an email. We have a separate page where we can see all of the alerts but we don't see all of them come across our emails. All of the alerts are configured the same way as seen below:  I'm not understanding why the email notifications only work for certain alerts when we can see all of the alerts on our dashboard and they're all configured the same.  ... View more