Rename users security ID

Glace · ‎12-10-2020

Hi, i have urgent question. Can i rename security ID of PC without renaming on local PC?

I renamed pc after instalation of splunk forwarder but Security ID in logs still shows old name. How can i fix it without having to renaming it in local INPUTS.conf SERVER.conf.

Thx for fast response

Glace · ‎12-10-2020

Security ID = Instance name

Rename users security ID

audit

authentication

login

permissions

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A

Join the Conversation

Rename users security ID

audit

authentication

login

permissions

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Deep Dive: Accelerate threat investigation with Splunk’s AI Assistant in Security

Announcing Modern Navigation: A New Era of Splunk User Experience

Detection Engineering Office Hours: Real-World Troubleshooting & Q&A