hidden user in users



we had the user with name user1, after some days the user was hidden in settings>users, but still user can login to splunk web. and we can't find user in users.

Labels (2)
0 Karma


Hi @khanlarloo 

There is no hidden user concept in Splunk, if you login the SH cluster/standalone you can find users there local to splunk , LDAP and SAML. It depends what kind of Auth model you have?

Authentication, Autherisation conf files on SH to find the user you are looking for exist?

Do under bin, grep user that you are looking for -  ./splunk btool authentication list --debug 


An upvote would be appreciated if this reply helps!

Tags (1)
0 Karma
Get Updates on the Splunk Community!

Using Machine Learning for Hunting Security Threats

WATCH NOW Seeing the exponential hike in global cyber threat spectrum, organizations are now striving more for ...

Observability Newsletter Highlights | March 2023

 March 2023 | Check out the latest and greatestSplunk APM's New Tag Filter ExperienceSplunk APM has updated ...

Security Newsletter Updates | March 2023

 March 2023 | Check out the latest and greatestUnify Your Security Operations with Splunk Mission Control The ...