Security

how do i delete LDAP users permanently from splunk users list

splunkgk
Path Finder

Hi,

My splunk app is configured with LDAP authentication method and there is a bunch of users who left and they need to delete from splunk. How do i delete permanently. The users do not have any ownership of any apps and searches.

-thanks

Tags (2)
0 Karma

jworthington_sp
Splunk Employee
Splunk Employee

I think this topic in the Splunk documentation should help you with your problem:

http://docs.splunk.com/Documentation/Splunk/6.6.1/Security/BestpracticeforremovinganLDAPuser

0 Karma

splunkgk
Path Finder

Hi, I have Tried this. Deleted the some user's folder under /SPLUNNK_HOME/etc/users but still I can see them on the splunkd.log and users list on the dashboard.

The users which i am deleting are do not have any saved searches and objects. They are deleted from my LDAP group as well. Why Splunk is attempting to contact those users and showing them on list?

-Thanks

splunkme3
Engager

Hi @splunkgk, were you able to resolve this issue?

0 Karma
Get Updates on the Splunk Community!

Dashboards: Hiding charts while search is being executed and other uses for tokens

There are a couple of features of SimpleXML / Classic dashboards that can be used to enhance the user ...

Splunk Observability Cloud's AI Assistant in Action Series: Explaining Metrics and ...

This is the fourth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how ...

Brains, Bytes, and Boston: Learn from the Best at .conf25

When you think of Boston, you might picture colonial charm, world-class universities, or even the crack of a ...