Deployment Architecture

What is the best way to add users to the search head cluster?

mlevsh
Builder

Hi,
We are running Splunk 6.3.3. Our search head cluster (4 search heads at the moment) is using SAML authentication.
We are looking for a way to add an user with Splunk authentication without adding it on each search head separately.

Any ideas will be appreciated!
Thanks

0 Karma

cdoebert
Path Finder

There is no way in 6.3.3 to have the changes replicate. You'll need to run the splunk add user command on each search head.

http://docs.splunk.com/Documentation/Splunk/6.3.3/DistSearch/AdduserstotheSHC

mlevsh
Builder

@cdoebert, actually there is a way to replicate - if shared secret is the same between servers (in our case there is) we can copy $SPLUNK_HOME/etc/passwd file that has a new user created to other servers , restart splunk on servers with just copied file. Make sure to backup

0 Karma
Get Updates on the Splunk Community!

Index This | What is the next number in the series? 7,645 5,764 4,576…

February 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...

Buttercup Games: Further Dashboarding Techniques

Hello! We are excited to kick off a new series of blogs from SplunkTrust member ITWhisperer, who demonstrates ...

Message Parsing in SOCK

Introduction This blog post is part of an ongoing series on SOCK enablement. In this blog post, I will write ...