Splunk Enterprise

What's an authDB in current Splunk? What was it in old versions of Splunk?

jrodman
Splunk Employee
Splunk Employee

I see I have an "index" var/lib/splunk/authDB with nothing in it. Do I need this? Does Splunk need to maintain support for this indefinitely?

Tags (3)
1 Solution

gkanapathy
Splunk Employee
Splunk Employee

It is of no use in Splunk 3.4, 4.0 or 4.1, and can be deleted. It seems to me that it was probably useless in all 3.x releases, but I don't feel it's worth checking. At some older version before this, it appeared to contain user-related information. This data is in configuration files in later releases.

View solution in original post

gkanapathy
Splunk Employee
Splunk Employee

It is of no use in Splunk 3.4, 4.0 or 4.1, and can be deleted. It seems to me that it was probably useless in all 3.x releases, but I don't feel it's worth checking. At some older version before this, it appeared to contain user-related information. This data is in configuration files in later releases.

Get Updates on the Splunk Community!

Splunk Observability Cloud | Customer Survey!

If you use Splunk Observability Cloud, we invite you to share your valuable insights with us through a brief ...

Happy CX Day, Splunk Community!

Happy CX Day, Splunk Community! CX stands for Customer Experience, and today, October 3rd, is CX Day — a ...

.conf23 | Get Your Cybersecurity Defense Analyst Certification in Vegas

We’re excited to announce a new Splunk certification exam being released at .conf23! If you’re going to Las ...