Splunk Enterprise

What's an authDB in current Splunk? What was it in old versions of Splunk?

jrodman
Splunk Employee
Splunk Employee

I see I have an "index" var/lib/splunk/authDB with nothing in it. Do I need this? Does Splunk need to maintain support for this indefinitely?

Tags (3)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

It is of no use in Splunk 3.4, 4.0 or 4.1, and can be deleted. It seems to me that it was probably useless in all 3.x releases, but I don't feel it's worth checking. At some older version before this, it appeared to contain user-related information. This data is in configuration files in later releases.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

It is of no use in Splunk 3.4, 4.0 or 4.1, and can be deleted. It seems to me that it was probably useless in all 3.x releases, but I don't feel it's worth checking. At some older version before this, it appeared to contain user-related information. This data is in configuration files in later releases.

Get Updates on the Splunk Community!

Index This | A sphere has three, a circle has two, and a point has zero. What is it?

September 2023 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

Build Scalable Security While Moving to Cloud - Guide From Clayton Homes

 Clayton Homes faced the increased challenge of strengthening their security posture as they went through ...

Mission Control | Explore the latest release of Splunk Mission Control (2.3)

We’re happy to announce the release of Mission Control 2.3 which includes several new and exciting features ...