https://community.splunk.com/t5/Security/Import-Export-User-Data/m-p/40305#M1350 <P>Did you restart splunk2 after the import? The status notice shows that the user data was imported, but you do need to restart for the users to show.</P> Tue, 08 Feb 2011 11:06:29 GMT Ron_Naken 2011-02-08T11:06:29Z https://community.splunk.com/t5/Security/Import-Export-User-Data/m-p/40304#M1349 <P>I'm trying to export and import users (and preferably roles) from one Splunk instance to another with no luck.</P> <P>This is the process I'm following. When I'm complete, the user accounts do not exist on the second instance.</P> <P>TIA....</P> <P>Export</P> <PRE><CODE>Create a directory to export the data to (exported.data) [root@splunk /]# mkdir exported.data [root@splunk /]# /splunk/bin/splunk export userdata /exported.data/ Backing up to dir: /exported.data. Exporting /splunk/etc/apps/search/local/savedsearches.conf. </CODE></PRE> <P>Copy data to another instance</P> <P>Import</P> <PRE><CODE>[root@splunk2 root]# /splunk/bin/splunk import userdata -dir exported.data Restoring user data from dir: exported.data. Importing /splunk/etc/apps/search/local/savedsearches.conf. </CODE></PRE> <P>no accounts, why??</P> Tue, 08 Feb 2011 01:50:57 GMT https://community.splunk.com/t5/Security/Import-Export-User-Data/m-p/40304#M1349 DTERM 2011-02-08T01:50:57Z https://community.splunk.com/t5/Security/Import-Export-User-Data/m-p/40305#M1350 <P>Did you restart splunk2 after the import? The status notice shows that the user data was imported, but you do need to restart for the users to show.</P> Tue, 08 Feb 2011 11:06:29 GMT https://community.splunk.com/t5/Security/Import-Export-User-Data/m-p/40305#M1350 Ron_Naken 2011-02-08T11:06:29Z