topic Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI in Deployment Architecture

cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

Bisho-Fouad — Sun, 05 Nov 2023 11:34:35 GMT

a problem where the cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI and state that there are no users. Set up a user

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

JohnEGones — Sun, 05 Nov 2023 20:52:16 GMT

Hi, not answering a question since you didn't ask one, but it seems like you're asking if you can set-up a user if you cannot reach the GUI on either the CM or DS in a distributed cluster?

If so, you might start here:

https://community.splunk.com/t5/Security/How-to-create-a-user-from-the-command-line-and-require-password/m-p/410937

DOCS: https://docs.splunk.com/Documentation/Splunk/9.1.1/Security/ConfigureuserswiththeCLI

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

gcusello — Mon, 06 Nov 2023 06:32:34 GMT

Hi @Bisho-Fouad ,

you culd manage Cluster Manager and Deployment Server via CLI: it isn't so easy but it's possible!

But anyway you need an admin user because every CLI command requires an authentication.

Ciao.

Giuseppe

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

Bisho-Fouad — Mon, 06 Nov 2023 07:31:20 GMT

Hi gcusello
I already have admin user privileges, but I'm having trouble logging in with my admin account, even though I've added it to the cluster master twice and verified it with CLI commands.

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

Bisho-Fouad — Mon, 06 Nov 2023 07:35:52 GMT

Hi JohnEGones.

I already have admin user, and is used it to login many times before, but I'm having trouble logging in with my admin account, even though I've added it to the cluster master twice and verified it with CLI commands.

any recommendations ?

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

gcusello — Mon, 06 Nov 2023 08:02:09 GMT

Hi @Bisho-Fouad ,

which kind of troubles?

Have you your login page?

is your account a local or LDAP account?

If local, you have only to remember the password, if LDAP, check the integration entering with a ocal account.

Ciao.

Giuseppe

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

Bisho-Fouad — Mon, 06 Nov 2023 08:13:17 GMT

Hi Again @gcusello

1- which kind of troubles ?
please check the attach

2- Have you your login page ?

Yes, its appears normal

3- is your account a local or LDAP account?

sorry but can you guide me what is the difference as new user in Splunk

thanks for your time

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

gcusello — Mon, 06 Nov 2023 08:32:50 GMT

Hi @Bisho-Fouad ,

every Splunk system can have two kinds of users:

local users: manually created on the system,
users from the external authentication system: they depends on the Auth system.

At least, every Splunk system has a local users usually called "admin", that's created at the installation moment.

Did you tried using this admin account?

It seems that in this system you have only the admin user and not other ones.

Ciao.

Giuseppe

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

Bisho-Fouad — Mon, 06 Nov 2023 09:30:41 GMT

Hi @gcusello

1- Did you tried using this admin account ?

yes I tired, and that the account which face the issue

Also its the only user I have in the system

any other recommendations ?

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

gcusello — Mon, 06 Nov 2023 10:10:02 GMT

Hi @Bisho-Fouad ,

if you're using a wrong password, you have a different message.

I suppose that there's something strange in your installation.

In generai I'd hint to reinstall the system, but the ya re Cluster Manager an Deployment Server, so it isn't possible!

Open a case to Splunk Support, it's the best solution!

Ciao.

Giuseppe

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

Bisho-Fouad — Mon, 06 Nov 2023 11:27:23 GMT

Hi @gcusello

I am sure with my used password,

if you have any other recommendations just send to me.

thanks for your time,

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

gcusello — Mon, 06 Nov 2023 11:30:49 GMT

Hi @Bisho-Fouad ,

as I said,it's a strange message.

For this reason I hinted to open a case to Splunk Support also because these are two important nodes in your infrastructure.

Ciao.

Giuseppe

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

Bisho-Fouad — Mon, 06 Nov 2023 11:45:03 GMT

@gcusello
its really strange message.

i will open ticket.

thanks for your time.

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

gcusello — Mon, 06 Nov 2023 12:03:14 GMT

Hi @Bisho-Fouad ,

I'm sorry I couldn't help you more.

let me know if I can help you more, or, please, accept one answer for the other people of Community.

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

Re: cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

Bisho-Fouad — Tue, 07 Nov 2023 06:54:16 GMT

Hi @gcusello

no worries about that other wise thanks for your time, sure .

Karma Points are appreciated too for me