- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
What is the best way to add users to the search head cluster?
Hi,
We are running Splunk 6.3.3. Our search head cluster (4 search heads at the moment) is using SAML authentication.
We are looking for a way to add an user with Splunk authentication without adding it on each search head separately.
Any ideas will be appreciated!
Thanks
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content

There is no way in 6.3.3 to have the changes replicate. You'll need to run the splunk add user
command on each search head.
http://docs.splunk.com/Documentation/Splunk/6.3.3/DistSearch/AdduserstotheSHC
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
@cdoebert, actually there is a way to replicate - if shared secret is the same between servers (in our case there is) we can copy $SPLUNK_HOME/etc/passwd file that has a new user created to other servers , restart splunk on servers with just copied file. Make sure to backup
