topic Re: How to delete user in splunk? in Splunk Search https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281228#M190550 <P>For LDAP authentication, you can find the users who left the company and their LDAP account is deleted using following search</P> <PRE><CODE>index=_internal sourcetype=splunkd source=*splunkd.log component=AuthenticationManagerLDAP log_level=ERROR "Could not find" | table user </CODE></PRE> Mon, 15 Feb 2016 16:46:14 GMT somesoni2 2016-02-15T16:46:14Z How to delete user in splunk? https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281225#M190547 <P>Hi All,</P> <P>I need to remove users from splunk, which they are no longer exist in company but user is still exists in splunk<BR /> Any search query to find user, whoever not using splunk since couple of weeks.</P> <P>Thanks,</P> <P>Tarak</P> Mon, 15 Feb 2016 04:42:30 GMT https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281225#M190547 taraksinha 2016-02-15T04:42:30Z Re: How to delete user in splunk? https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281226#M190548 <P>FYI:- those are LDAP users</P> Mon, 15 Feb 2016 04:45:17 GMT https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281226#M190548 taraksinha 2016-02-15T04:45:17Z Re: How to delete user in splunk? https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281227#M190549 <P>Hi<BR /> see these links which show a query to find user<BR /> <A href="https://answers.splunk.com/answers/233593/how-to-retrieve-current-user-in-splunk.html">https://answers.splunk.com/answers/233593/how-to-retrieve-current-user-in-splunk.html</A><BR /> <A href="https://answers.splunk.com/answers/28633/current-user-in-search.html">https://answers.splunk.com/answers/28633/current-user-in-search.html</A></P> Mon, 15 Feb 2016 07:59:52 GMT https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281227#M190549 chimell 2016-02-15T07:59:52Z Re: How to delete user in splunk? https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281228#M190550 <P>For LDAP authentication, you can find the users who left the company and their LDAP account is deleted using following search</P> <PRE><CODE>index=_internal sourcetype=splunkd source=*splunkd.log component=AuthenticationManagerLDAP log_level=ERROR "Could not find" | table user </CODE></PRE> Mon, 15 Feb 2016 16:46:14 GMT https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281228#M190550 somesoni2 2016-02-15T16:46:14Z Re: How to delete user in splunk? https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281229#M190551 <P>thanks.<BR /> You forgot to vote it</P> Wed, 17 Feb 2016 09:37:45 GMT https://community.splunk.com/t5/Splunk-Search/How-to-delete-user-in-splunk/m-p/281229#M190551 chimell 2016-02-17T09:37:45Z