Splunk Search

missing users.ini file

molinarf
Communicator

I have been getting a message that says that a file has been improperly modified or missing. The result of the integrity check says that that file that failed is users.ini that is located in /etc/users. Upon inspection of the folder the users.ini file is named users.ini.pre405 and its size is 0KB. This doesn't prevent Splunk from working, but just more of an annoyance right now. Can anyone help me with resolving this issue?

Thank you in advance.

Configuration:
Splunk 6.6.3
Windows 2012 R2
16 CPU Cores/32 Virtual CPU Cores
256 GB Memory
3TB disk space

Tags (1)
0 Karma

molinarf
Communicator

When I upgraded to version 7.0.0, the installation process created a new users.ini file. There is no issue now.

0 Karma
Get Updates on the Splunk Community!

The OpenTelemetry Certified Associate (OTCA) Exam

What’s this OTCA exam? The Linux Foundation offers the OpenTelemetry Certified Associate (OTCA) credential to ...

From Manual to Agentic: Level Up Your SOC at Cisco Live

Welcome to the Era of the Agentic SOC   Are you tired of being a manual alert responder? The security ...

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 4)

Welcome back to Splunk Classroom Chronicles, our ongoing series where we shine a light on what really happens ...