Security

Distribute User-Settings between Clusters

horsefez
Motivator

Hello fellow Splunkers,

I'm currently trying to test user authentication via splunk-web.
I've learned that users who get added to a search-head-cluster-member automatically get replicated onto all sh-cluster-members.
I think I have to manually add users, if needed, to the search-head-deployer/indexer-cluster-master.

What I don't know is... if I have to add users, if needed, to a indexer-cluster manually on every node. Or if it's like the sh-cluster.


Someone out there who knows how to do it the right way?

Thanks in advance!
Best Regards,
pyro_wood

0 Karma

hardikJsheth
Motivator

The User configurations will get replicated on search head clusters if you are using Splunk 6.4 and above. If you are using version prior to 6.4, you need to do this configurations manully on all search head nodes.

For Indexers, you need to configure user manually on each node.

horsefez
Motivator

Thank you very much hardikjsheth!

Is one of the admins able to convert his reply to an answer, so I can accept it?

0 Karma

masonmorales
Influencer

@pyro_wood Done!

0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Introducing ITSI 5.0: Unified Visibility and Actionable Insights

Introducing ITSI 5.0: Unified Visibility and Actionable Insights Tuesday, July 21, 2026  |  10:00AM PT / ...

Inside Splunk Agent Observability: Understanding Agent Behavior, Tokens & Costs

Inside Splunk Agent Observability:Understanding Agent Behavior, Tokens & Costs Thursday, August 06, ...

From Data to Insight: Announcing the Winners of the Splunk Dashboard Contest

Hi Splunkers, First off, thank you to everyone who participated in our very first From Data to Insight: The ...