Using authorize.conf, we can create roles. Using authentication.conf, we can map roles to LDAP groups. But how can we add users with Splunk authentication using configuration files?
Would be command line useful as well?
Configure users with the CLI
https://docs.splunk.com/Documentation/Splunk/6.5.2/Security/ConfigureuserswiththeCLI
Splunk CLI is the way to go. You can create a user in configuration file. You may be able to copy users from other Splunk instance of yours by copying user and corresponding encrypted password from $SPLUNK_HOME/etc/passwd file. Sample user entry could be like this
:username:<hashed-password>::DisplayName:role(s):your@email.here