Installation

want to replace service account with new one for my Splunk Enterprise installation

AkashNTT
Loves-to-Learn Lots

Hi Friends, i am using Splunk Enterprise  7.1.1.0. During installation My Ex-colleague had used his own user ID and now services are running using his ID. Since he left the Organization i need to replace the user ID with Service account. Please advise what are the places i need to conceder to check and replace the account? for example Splunk services , any database etc. Thank you !

Labels (3)
0 Karma

AkashNTT
Loves-to-Learn Lots

Hi Laurent, thank you for your help. now i am clear what permission required for new service account. Now could you please advise what places Splunk use user account or service account to run the show. e.g. windows services, sql database or anything else? i want to know which places i need to replace/update the new service account?

 

Thank you very much for shedding some light on this !

 

Regards

Akash

0 Karma

AkashNTT
Loves-to-Learn Lots

Anyone can advise on my query ? Thank you !

0 Karma

AkashNTT
Loves-to-Learn Lots

Hi Laurent, 

Thank you so much for your time and valuable advise. Now i understand the Permission requirement as per your provided article. Upgrade looks not possible very soon. Hence advise which places Splunk uses these service account after installation..so for now at list i can replace the old account with new service account.

I have created a service account with same permission as existing one.

Thanks once again for your time !

 

Regards

Akash

0 Karma

llacoste
Path Finder

Hi,

I believe you will find some good information here: https://docs.splunk.com/Documentation/Splunk/8.1.0/Installation/ChoosetheuserSplunkshouldrunas
Maybe the best would be to upgrade your version if you can to a supported version (I know that it's not always possible when working in some companies) and probably be able to change the user at that point when doing the upgrade.

Let me know if that's working/helpful.

Regards

Laurent

0 Karma

AkashNTT
Loves-to-Learn Lots

could you please advise what places Splunk use user account or service account to run the show. e.g. windows services, sql database or anything else? i want to know which places i need to replace/update the new service account?

0 Karma
Get Updates on the Splunk Community!

What's new in Splunk Cloud Platform 9.1.2312?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.1.2312! Analysts can ...

What’s New in Splunk Security Essentials 3.8.0?

Splunk Security Essentials (SSE) is an app that can amplify the power of your existing Splunk Cloud Platform, ...

Let’s Get You Certified – Vegas-Style at .conf24

Are you ready to level up your Splunk game? Then, let’s get you certified live at .conf24 – our annual user ...