Splunk Enterprise

Running deployers on different service account than the rest of the clustered environment


Currently we're running our whole environment on a local splunk account for SH, IDX, CM, DS, etc, all on linux os. 

Is it possible to run different components with different service accounts? Would it be possible to use a different service account, using AD network group for the DS and leave all other components as is (using a local user account)? 


Labels (3)
0 Karma


Yes, you don't have to run all instances under the same account.  They communicate over the network so they have no idea (nor do they care) what the other ID is.

If this reply helps you, Karma would be appreciated.
0 Karma
Get Updates on the Splunk Community!

Optimize Cloud Monitoring

  TECH TALKS Optimize Cloud Monitoring Tuesday, August 13, 2024  |  11:00AM–12:00PM PST   Register to ...

What's New in Splunk Cloud Platform 9.2.2403?

Hi Splunky people! We are excited to share the newest updates in Splunk Cloud Platform 9.2.2403! Analysts can ...

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...