Need your help!,
Can you please tell us, how to push user account from master/deployment node to SHC members and etc/system/local config. We are pushing apps and users folder from etc/shcluster/ using below, but we could see any option to use etc/passwd file to SHC members. also there is no option to push the standalone search head etc/system/local directory config.
./splunk apply shcluster-bundle --answer-yes -target https://1.13.2.1:8089 -auth admin:changeme
If you're using Splunk's built-in authentication then you will have to add every user to each cluster member:
Great. If that answers your question then please mark the answer as accepted.
As the path implies, those settings are local to a system. If you want to push them to the cluster you should package them in an app, or configure the settings on each member.
Thank you so much for the details.
thanks, We are using external SSO authentication, but user permissions are stored in Splunk. Can you please tell us, how to copy the standalone etc/system/local/ (web.conf, transforms.conf..etc) files to SHC nodes?.