Installation

Trying to setup indexer cluster using ansible playbooks

proficio_ajk
Loves-to-Learn

I'm currently attempting to setup an environment using https://github.com/splunk/splunk-ansible.

When I run the playbook it creates the appropriate user-seed.conf but /opt/splunk/etc/passwd has no user. There for when it tries to run the commands to turn a server into the cluster manager or a peer it isn't able to do it.

Running Rocky Linux 8.

Labels (2)
Tags (2)
0 Karma

proficio_ajk
Loves-to-Learn

Yep the playbook does create the user-seed.conf first then starts Splunk. The password.conf does not contain anything after it starts though.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The user-seed.conf file is not processed into etc/passwd until Splunk starts.  After that, you should be able to issue commands.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Splunk Enterprise Security 8.x: The Essential Upgrade for Threat Detection, ...

 Prepare to elevate your security operations with the powerful upgrade to Splunk Enterprise Security 8.x! This ...

Get Early Access to AI Playbook Authoring: Apply for the Alpha Private Preview ...

Passionate about security automation? Apply now to our AI Playbook Authoring Alpha private preview ...

Reduce and Transform Your Firewall Data with Splunk Data Management

Managing high-volume firewall data has always been a challenge. Noisy events and verbose traffic logs often ...