cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

[Bisho-Fouad]

a problem where the cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI and state that there are no users. Set up a user

[gcusello]

Hi @Bisho-Fouad ,

you culd manage Cluster Manager and Deployment Server via CLI: it isn't so easy but it's possible!

But anyway you need an admin user because every CLI command requires an authentication.

Ciao.

Giuseppe

[Bisho-Fouad]

Hi gcusello
I already have admin user privileges, but I'm having trouble logging in with my admin account, even though I've added it to the cluster master twice and verified it with CLI commands.

[gcusello]

Hi @Bisho-Fouad ,

which kind of troubles?

Have you your login page?

is your account a local or LDAP account?

If local, you have only to remember the password, if LDAP, check the integration entering with a ocal account.

Ciao.

Giuseppe

[Bisho-Fouad]

Hi Again @gcusello 

1- which kind of troubles ?
please check the attach

2- Have you your login page ?

Yes, its appears normal

3- is your account a local or LDAP account?

sorry but can you guide me what is the difference as new user in Splunk

thanks for your time

[gcusello]

Hi @Bisho-Fouad ,

every Splunk system can have two kinds of users:

• local users: manually created on the system,
• users from the external authentication system: they depends on the Auth system.

At least, every Splunk system has a local users usually called "admin", that's created at the installation moment.

Did you tried using this admin account?

It seems that in this system you have only the admin user and not other ones.

Ciao.

Giuseppe

[Bisho-Fouad]

Hi @gcusello 

1- Did you tried using this admin account ?

yes I tired, and that the account which face the issue

Also its the only user I have in the system 

any other recommendations ?

[gcusello]

Hi @Bisho-Fouad ,

if you're using a wrong password, you have a different message.

I suppose that there's something strange in your installation.

In generai I'd hint to reinstall the system, but the ya re Cluster Manager an Deployment Server, so it isn't possible!

Open a case to Splunk Support, it's the best solution!

Ciao.

Giuseppe

[Bisho-Fouad]

Hi @gcusello 

I am sure with my used password,

if you have any other recommendations just send to me.

thanks for your time, 

[gcusello]

Hi @Bisho-Fouad ,

as I said,it's a strange message.

For this reason I hinted to open a case to Splunk Support also because these are two important nodes in your infrastructure.

Ciao.

Giuseppe

[Bisho-Fouad]

@gcusello 
its really strange message.

i will open ticket.

thanks for your time.

[gcusello]

Hi @Bisho-Fouad ,

I'm sorry I couldn't help you more.

let me know if I can help you more, or, please, accept one answer for the other people of Community.

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

[Bisho-Fouad]

Hi @gcusello 

no worries about that other wise thanks for your time, sure .

Karma Points are appreciated too for me

[JohnEGones]

Hi, not answering a question since you didn't ask one, but it seems like you're asking if you can set-up a user if you cannot reach the GUI on either the CM or DS in a distributed cluster?

If so, you might start here: 

https://community.splunk.com/t5/Security/How-to-create-a-user-from-the-command-line-and-require-pass...

DOCS: https://docs.splunk.com/Documentation/Splunk/9.1.1/Security/ConfigureuserswiththeCLI

[Bisho-Fouad]

Hi JohnEGones.

I already have admin user, and is used it to login many times before, but I'm having trouble logging in with my admin account, even though I've added it to the cluster master twice and verified it with CLI commands.

any recommendations ?