hidden user in users



we had the user with name user1, after some days the user was hidden in settings>users, but still user can login to splunk web. and we can't find user in users.

Labels (2)
0 Karma


Hi @khanlarloo 

There is no hidden user concept in Splunk, if you login the SH cluster/standalone you can find users there local to splunk , LDAP and SAML. It depends what kind of Auth model you have?

Authentication, Autherisation conf files on SH to find the user you are looking for exist?

Do under bin, grep user that you are looking for -  ./splunk btool authentication list --debug 


An upvote would be appreciated if this reply helps!

Tags (1)
0 Karma
Get Updates on the Splunk Community!

.conf24 | Day 0

Hello Splunk Community! My name is Chris, and I'm based in Canberra, Australia's capital, and I travelled for ...

Enhance Security Visibility with Splunk Enterprise Security 7.1 through Threat ...

 (view in My Videos)Struggling with alert fatigue, lack of context, and prioritization around security ...

Troubleshooting the OpenTelemetry Collector

  In this tech talk, you’ll learn how to troubleshoot the OpenTelemetry collector - from checking the ...