Migrating Users from standalone to a cluster

[robertlynch2020]

Hi

I am moving from one machine to a 5 machine cluster.

• 1 SH
• 1 Master Node
• 3 Indexer

What are the steps I need to migrate all my users? And to what machine do I need to copy the new files to?

Thanks in Advance

Rob

[robertlynch2020]

Thanks,  this worked

• copy of three tings
• /etc/users , /etc/system/local/authorize.conf , /etc/passwd
• Then restart

[inventsekar · Accepted solution]

Hi @robertlynch2020 

From https://community.splunk.com/t5/Archive/How-to-migrate-users-to-a-search-head-cluster/m-p/397704

- On each search head, I made a backup of etc/passwd (which contains only the admin user)
- I then copied the etc/passwd file from my stand-alone Splunk to each search head
- On the copied passwd file, I replaced the admin entry with the one from my backup passwd
- I restarted all my search heads

Result:
- I can successfully login to my search head using the users (with their passwords) contained in the copied passwd.
- I can also login to my search head using the admin and its pwd which I specified when I setup the new search header cluster

Splunk Documentation:

https://docs.splunk.com/Documentation/Splunk/8.0.6/DistSearch/Migratefromstandalonesearchheads