You shouldn't have any issues changing the account that the service is running as. As long as that user has the right to logon as a service, which windows will take care of when you assign the account to the service, you won't have any issues. I installed my system and then switched the service to run using a domain account when WMI did not work and have not had any issues at all. Also, I'm using the built-in Splunk security and it has not thrown any errors when changing the configuration, which would happen if the service account did not have the ability to write to files in the Splunk installation directory.
... View more