Deployment Architecture

Adding users via REST API on search head cluster

brent_weaver
Builder

Is it possible to add users via the Splunk REST API in a SH cluster? I thought that I had tested this but now when I try to add a user it just hangs. Any help is much appreciated!

martin_mueller
SplunkTrust
SplunkTrust

I'd really very strongly recommend using LDAP or similar things for authentication, maintaining users manually is a huge pain in any org large enough to require SHC.

That being said, anything you can do through the UI you can do through REST, see the other question you had: https://answers.splunk.com/answers/561658/modify-splunk-users-role-via-the-rest-api.html

0 Karma
Get Updates on the Splunk Community!

App Platform's 2025 Year in Review: A Year of Innovation, Growth, and Community

As we step into 2026, it’s the perfect moment to reflect on what an extraordinary year 2025 was for the Splunk ...

Operationalizing Entity Risk Score with Enterprise Security 8.3+

Overview Enterprise Security 8.3 introduces a powerful new feature called “Entity Risk Scoring” (ERS) for ...

Unlock Database Monitoring with Splunk Observability Cloud

  In today’s fast-paced digital landscape, even minor database slowdowns can disrupt user experiences and ...