Installation

Migrating Users from standalone to a cluster

robertlynch2020
Motivator

Hi

I am moving from one machine to a 5 machine cluster.

  • 1 SH
  • 1 Master Node
  • 3 Indexer

What are the steps I need to migrate all my users? And to what machine do I need to copy the new files to?

Thanks in Advance

Rob

Labels (1)
0 Karma
1 Solution

inventsekar
Super Champion

Hi @robertlynch2020 

From https://community.splunk.com/t5/Archive/How-to-migrate-users-to-a-search-head-cluster/m-p/397704

- On each search head, I made a backup of etc/passwd (which contains only the admin user)
- I then copied the etc/passwd file from my stand-alone Splunk to each search head
- On the copied passwd file, I replaced the admin entry with the one from my backup passwd
- I restarted all my search heads

Result:
- I can successfully login to my search head using the users (with their passwords) contained in the copied passwd.
- I can also login to my search head using the admin and its pwd which I specified when I setup the new search header cluster

 

Splunk Documentation:

https://docs.splunk.com/Documentation/Splunk/8.0.6/DistSearch/Migratefromstandalonesearchheads

 

View solution in original post

robertlynch2020
Motivator

Thanks,  this worked

  • copy of three tings
  • /etc/users , /etc/system/local/authorize.conf , /etc/passwd
  • Then restart

inventsekar
Super Champion

Hi @robertlynch2020 

From https://community.splunk.com/t5/Archive/How-to-migrate-users-to-a-search-head-cluster/m-p/397704

- On each search head, I made a backup of etc/passwd (which contains only the admin user)
- I then copied the etc/passwd file from my stand-alone Splunk to each search head
- On the copied passwd file, I replaced the admin entry with the one from my backup passwd
- I restarted all my search heads

Result:
- I can successfully login to my search head using the users (with their passwords) contained in the copied passwd.
- I can also login to my search head using the admin and its pwd which I specified when I setup the new search header cluster

 

Splunk Documentation:

https://docs.splunk.com/Documentation/Splunk/8.0.6/DistSearch/Migratefromstandalonesearchheads

 

View solution in original post

.conf21 CFS Extended through 5/20!

Don't miss your chance
to share your Splunk
wisdom in-person or
virtually at .conf21!

Call for Speakers has
been extended through
Thursday, 5/20!