hidden user in users

[khanlarloo]

hi 

we had the user with name user1, after some days the user was hidden in settings>users, but still user can login to splunk web. and we can't find user in users.

[venkatasri]

Hi @khanlarloo 

There is no hidden user concept in Splunk, if you login the SH cluster/standalone you can find users there local to splunk , LDAP and SAML. It depends what kind of Auth model you have?

Authentication, Autherisation conf files on SH to find the user you are looking for exist?

Do under bin, grep user that you are looking for -  ./splunk btool authentication list --debug 

---

An upvote would be appreciated if this reply helps!