Hello, Looked all over google and did not find a solution and Splunk support is not very responsive. I am hoping someone will give me a quick answer to this. I have a Search Head Cluster with three search instances. I deployed Splunk App for AWS Add-on via Deployer to all three search heads. I then created an IAM Role with all the permissions necessary using Splunk Documentation and attached the role to all three Search Head EC2 Instances on AWS. Logged back into each Search Head Instances and I only see the role auto-discovered on one of the Search Heads as oppose to all three. Is that by design or am I missing something? Thanks in advance for any answers to this. ... View more

Hello, I have done my research and did not find an answer for this issue. We are using the Splunk App for AWS and getting an error when saving the settings for LDAP. There are two errors that I get and both has to do with the entry in bind dn. If bind dn = cn=splunktest,cn=users,dc=domain,dc=local The error reads: Encountered the following error while trying to save: in handler 'LDAP-Auth': strategy="Splunk LDAP" Error binding to LDAP. reason="invalid credintials" If bind dn = cn Splunk Test,cn=users,dc=domaindc=local The error reads: Encountered the following error while trying to save: in handler 'LDAP-Auth': strategy="Splunk LDAP" Error binding to LDAP. reason="Strong(er) authentication required" My LDAP set up is below: LDAP Strategy Name: Splunk LDAP Host: IP Address Port: 389 Bind DN: cn=splunktest,cn=users,dc=domain,dc=local Bind DN Password: password Confirm Password: password User Base DN: dc=domain,dc=local User Base Filter: User Name Attribute: uid Real Name Attribute: cn Email Attribute: mail Group Mapping Attribute: dn Group Base DN: cn=Splunk Admins,ou=splunk,ou=apps,dc=domain,dc=local Static Group Search Filter: Group Name Attribute: cn Static Member Attribute: memeberUid Advanced Settings Search Request Size Limit: 1000 Search Request Time Limit: 15 Network Socket Timeout : 20 Thanks in advance for any replies on getting this solved. ... View more