Splunk Enterprise

What's an authDB in current Splunk? What was it in old versions of Splunk?

Splunk Employee
Splunk Employee

I see I have an "index" var/lib/splunk/authDB with nothing in it. Do I need this? Does Splunk need to maintain support for this indefinitely?

Tags (3)
1 Solution

Splunk Employee
Splunk Employee

It is of no use in Splunk 3.4, 4.0 or 4.1, and can be deleted. It seems to me that it was probably useless in all 3.x releases, but I don't feel it's worth checking. At some older version before this, it appeared to contain user-related information. This data is in configuration files in later releases.

View solution in original post

Splunk Employee
Splunk Employee

It is of no use in Splunk 3.4, 4.0 or 4.1, and can be deleted. It seems to me that it was probably useless in all 3.x releases, but I don't feel it's worth checking. At some older version before this, it appeared to contain user-related information. This data is in configuration files in later releases.

View solution in original post