Security

how do i delete LDAP users permanently from splunk users list

splunkgk
Path Finder

Hi,

My splunk app is configured with LDAP authentication method and there is a bunch of users who left and they need to delete from splunk. How do i delete permanently. The users do not have any ownership of any apps and searches.

-thanks

Tags (2)
0 Karma

jworthington_sp
Splunk Employee
Splunk Employee

I think this topic in the Splunk documentation should help you with your problem:

http://docs.splunk.com/Documentation/Splunk/6.6.1/Security/BestpracticeforremovinganLDAPuser

0 Karma

splunkgk
Path Finder

Hi, I have Tried this. Deleted the some user's folder under /SPLUNNK_HOME/etc/users but still I can see them on the splunkd.log and users list on the dashboard.

The users which i am deleting are do not have any saved searches and objects. They are deleted from my LDAP group as well. Why Splunk is attempting to contact those users and showing them on list?

-Thanks

splunkme3
Engager

Hi @splunkgk, were you able to resolve this issue?

0 Karma
Get Updates on the Splunk Community!

Splunk Observability Cloud’s AI Assistant in Action Series: Analyzing and ...

This is the second post in our Splunk Observability Cloud’s AI Assistant in Action series, in which we look at ...

Elevate Your Organization with Splunk’s Next Platform Evolution

 Thursday, July 10, 2025  |  11AM PDT / 2PM EDT Whether you're managing complex deployments or looking to ...

Splunk Answers Content Calendar, June Edition

Get ready for this week’s post dedicated to Splunk Dashboards! We're celebrating the power of community by ...