Installation

Trying to setup indexer cluster using ansible playbooks

proficio_ajk
Loves-to-Learn

I'm currently attempting to setup an environment using https://github.com/splunk/splunk-ansible.

When I run the playbook it creates the appropriate user-seed.conf but /opt/splunk/etc/passwd has no user. There for when it tries to run the commands to turn a server into the cluster manager or a peer it isn't able to do it.

Running Rocky Linux 8.

Labels (2)
Tags (2)
0 Karma

proficio_ajk
Loves-to-Learn

Yep the playbook does create the user-seed.conf first then starts Splunk. The password.conf does not contain anything after it starts though.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The user-seed.conf file is not processed into etc/passwd until Splunk starts.  After that, you should be able to issue commands.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

What the End of Support for Splunk Add-on Builder Means for You

Hello Splunk Community! We want to share an important update regarding the future of the Splunk Add-on Builder ...

Solve, Learn, Repeat: New Puzzle Channel Now Live

Welcome to the Splunk Puzzle PlaygroundIf you are anything like me, you love to solve problems, and what ...

Building Reliable Asset and Identity Frameworks in Splunk ES

 Accurate asset and identity resolution is the backbone of security operations. Without it, alerts are ...