LDAP authentication method Splunk Enterprise

Splunk Enterprise

Hello all,

I'm trying to configure LDAP authentication in a Splunk Enterprise version 9.3.4. The configuration is working properly when the users are within the "Group base DN", but for better managing of all the users I was trying to use the "Nested groups" functionality ("Controls whether Splunk will expand nested groups using the 'memberof' extension. Only check this if you have nested groups and the 'memberof' extension on your LDAP server."), this is why there could be more subfolders under the group base. Anyway, if I move for example my user from the Group base DN to some subfolder, I'm not able anymore to access Splunk.

Am I missing something?

Thanks in advance!

Get Updates on the Splunk Community!

LDAP authentication method Splunk Enterprise

administration

configuration

other

using Splunk Enterprise

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future

Join the Conversation

LDAP authentication method Splunk Enterprise

administration

configuration

other

using Splunk Enterprise

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Automating Threat Operations and Threat Hunting with Recorded Future