topic Re: How to import user account from one splunk instance to another one ? in Installation

How to import a user account from one Splunk instance to another?

ameslet — Thu, 11 Jun 2020 23:50:44 GMT

Hi,

I would like to import a user account from one Splunk instance to another one. Is it enough to copy the users directory in app/list/Splunk/etc?

Thanks for your advice,

Alex

Re: How to import user account from one splunk instance to another one ?

woodcock — Fri, 01 Jul 2016 12:37:50 GMT

You also need to copy the entries in $SPLUNK_HONE/etc/passwd. Be sure to clone the roles first, though. This is only for local users.

Re: How to import user account from one splunk instance to another one ?

ameslet — Fri, 01 Jul 2016 12:50:47 GMT

Thanks for you answer, I didn't get it. What do you mean by clone the roles ?

Re: How to import user account from one splunk instance to another one ?

woodcock — Fri, 01 Jul 2016 13:29:06 GMT

Check the Settings -> Access Controls -> Roles and make sure that any of those assigned to the user that is being copied are setup before you copy. Otherwise the user behavior will probably not work correctly on the destination Search Head.

Re: How to import user account from one splunk instance to another one ?

ameslet — Fri, 01 Jul 2016 14:00:42 GMT

Okay, I get it now. I have checked for every user I want to import that the role alerady exists before copying it. Nevertheless, the users aren't recognized by the new instance. Do you know xaht I could do more to fix this issue ?

Re: How to import user account from one splunk instance to another one ?

woodcock — Fri, 01 Jul 2016 14:12:09 GMT

Sorry, you also need to copy the entry in $SPLUNK_HONE/etc/passwd.

Re: How to import user account from one splunk instance to another one ?

ameslet — Fri, 01 Jul 2016 14:38:19 GMT

Okay, it's working perfectly now. Thank you very much for your help.

Re: How to import user account from one splunk instance to another one ?

saurabh_tek — Mon, 24 Jul 2017 07:12:11 GMT

this works! Thanks

Re: How to import user account from one splunk instance to another one ?

mdmaala — Tue, 28 May 2019 06:44:44 GMT

How will I be able to clone the roles? I am checking this thread because I will transfer my splunk instance to a new account. Thank you so much!