Security
×

Are you a member of the Splunk Community?

Sign in or Register with your Splunk account to get your questions answered, access valuable resources and connect with experts!
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Ask a Question

User removed from LDAP but splunk still shows the user?

Vikuperi
New Member
‎08-06-2022 07:42 AM

Hi,

 

I have a use case where user has been removed from the LDAP , but when we check in the user via setting , we see the user still exists

 

Ideally automatically user should also be removed from splunk 

Labels (2)
Labels
0 Karma
Reply

richgalloway
SplunkTrust
SplunkTrust
‎08-06-2022 09:50 AM

That's normal.  Splunk consults the LDAP server when a user logs in, but the LDAP server does not notify Splunk when a user is removed (or added).

Once you've reassigned the user's assets to another user, you can delete the user manually.

---
If this reply helps you, Karma would be appreciated.
0 Karma
Reply
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July Tech Talks, Office Hours, and Webinars!

What are Community Office Hours?Community Office Hours is an interactive 60-minute Zoom series where ...

Updated Data Type Articles, Anniversary Celebrations, and More on Splunk Lantern

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

A Prelude to .conf25: Your Guide to Splunk University

Heading to Boston this September for .conf25? Get a jumpstart by arriving a few days early for Splunk ...