- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
iamsplunker
Communicator
03-04-2024
06:37 PM
Hi Splunk Community,
I'm trying to list all splunk local users (authentication system = splunk) . The below search lists all users SAML and Splunk but I'm only looking for local accounts.
| rest /services/authentication/users splunk_server=local
| fields roles title realname
| rename title as username
Thanks!
1 Solution
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
iamsplunker
Communicator
03-05-2024
05:24 PM
| rest /services/authentication/users splunk_server=local
| fields roles title type email
| rename title as username
| search type=SPLUNK
- Mark as New
- Bookmark Message
- Subscribe to Message
- Mute Message
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
iamsplunker
Communicator
03-05-2024
05:24 PM
| rest /services/authentication/users splunk_server=local
| fields roles title type email
| rename title as username
| search type=SPLUNK
