Deployment Architecture

cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI

Bisho-Fouad
Explorer

a problem where the cluster master and deployment server in the distributed Splunk environment cannot be logged in via the GUI and state that there are no users. Set up a user

Labels (1)
0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Bisho-Fouad ,

you culd manage Cluster Manager and Deployment Server via CLI: it isn't so easy but it's possible!

But anyway you need an admin user because every CLI command requires an authentication.

Ciao.

Giuseppe

Bisho-Fouad
Explorer

Hi gcusello
already have admin user privileges, but I'm having trouble logging in with my admin account, even though I've added it to the cluster master twice and verified it with CLI commands.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Bisho-Fouad ,

which kind of troubles?

Have you your login page?

is your account a local or LDAP account?

If local, you have only to remember the password, if LDAP, check the integration entering with a ocal account.

Ciao.

Giuseppe

Bisho-Fouad
Explorer

Hi Again @gcusello 

1- which kind of troubles ?
please check the attach

2- Have you your login page ?

Yes, its appears normal

3- is your account a local or LDAP account?

sorry but can you guide me what is the difference as new user in Splunk

thanks for your time

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Bisho-Fouad ,

every Splunk system can have two kinds of users:

  • local users: manually created on the system,
  • users from the external authentication system: they depends on the Auth system.

At least, every Splunk system has a local users usually called "admin", that's created at the installation moment.

Did you tried using this admin account?

It seems that in this system you have only the admin user and not other ones.

Ciao.

Giuseppe

Bisho-Fouad
Explorer

Hi @gcusello 

1- Did you tried using this admin account ?

yes I tired, and that the account which face the issue

Also its the only user I have in the system 

any other recommendations ?

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Bisho-Fouad ,

if you're using a wrong password, you have a different message.

I suppose that there's something strange in your installation.

In generai I'd hint to reinstall the system, but the ya re Cluster Manager an Deployment Server, so it isn't possible!

Open a case to Splunk Support, it's the best solution!

Ciao.

Giuseppe

Bisho-Fouad
Explorer

Hi @gcusello 

I am sure with my used password,

if you have any other recommendations just send to me.

thanks for your time, 

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Bisho-Fouad ,

as I said,it's a strange message.

For this reason I hinted to open a case to Splunk Support also because these are two important nodes in your infrastructure.

Ciao.

Giuseppe

0 Karma

Bisho-Fouad
Explorer

@gcusello 
its really strange message.

i will open ticket.

thanks for your time.

0 Karma

gcusello
SplunkTrust
SplunkTrust

Hi @Bisho-Fouad ,

I'm sorry I couldn't help you more.

let me know if I can help you more, or, please, accept one answer for the other people of Community.

Ciao and happy splunking

Giuseppe

P.S.: Karma Points are appreciated 😉

0 Karma

Bisho-Fouad
Explorer

Hi @gcusello 

 

no worries about that other wise thanks for your time, sure .

 

Karma Points are appreciated too for me

0 Karma

JohnEGones
Path Finder

Hi, not answering a question since you didn't ask one, but it seems like you're asking if you can set-up a user if you cannot reach the GUI on either the CM or DS in a distributed cluster?

If so, you might start here: 

https://community.splunk.com/t5/Security/How-to-create-a-user-from-the-command-line-and-require-pass...

DOCS: https://docs.splunk.com/Documentation/Splunk/9.1.1/Security/ConfigureuserswiththeCLI

 

0 Karma

Bisho-Fouad
Explorer

Hi JohnEGones.

I already have admin user, and is used it to login many times before, but I'm having trouble logging in with my admin account, even though I've added it to the cluster master twice and verified it with CLI commands.

any recommendations ? 

0 Karma
Get Updates on the Splunk Community!

Registration for Splunk University is Now Open!

Are you ready for an adventure in learning?   Brace yourselves because Splunk University is back, and it's ...

Splunkbase | Splunk Dashboard Examples App for SimpleXML End of Life

The Splunk Dashboard Examples App for SimpleXML will reach end of support on Dec 19, 2024, after which no new ...

Understanding Generative AI Techniques and Their Application in Cybersecurity

Watch On-Demand Artificial intelligence is the talk of the town nowadays, with industries of all kinds ...