Splunk Enterprise

What's an authDB in current Splunk? What was it in old versions of Splunk?

jrodman
Splunk Employee
Splunk Employee

I see I have an "index" var/lib/splunk/authDB with nothing in it. Do I need this? Does Splunk need to maintain support for this indefinitely?

Tags (3)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

It is of no use in Splunk 3.4, 4.0 or 4.1, and can be deleted. It seems to me that it was probably useless in all 3.x releases, but I don't feel it's worth checking. At some older version before this, it appeared to contain user-related information. This data is in configuration files in later releases.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

It is of no use in Splunk 3.4, 4.0 or 4.1, and can be deleted. It seems to me that it was probably useless in all 3.x releases, but I don't feel it's worth checking. At some older version before this, it appeared to contain user-related information. This data is in configuration files in later releases.

Get Updates on the Splunk Community!

Tech Talk Recap | Mastering Threat Hunting

Mastering Threat HuntingDive into the world of threat hunting, exploring the key differences between ...

Observability for AI Applications: Troubleshooting Latency

If you’re working with proprietary company data, you’re probably going to have a locally hosted LLM or many ...

Splunk AI Assistant for SPL vs. ChatGPT: Which One is Better?

In the age of AI, every tool promises to make our lives easier. From summarizing content to writing code, ...