Installation

How to copy all the users from one existing server to the new server?

jiuan
Explorer

I'm setting up a new Splunk Server on a different OS. Instead of creating all the users manually, how can I copy all the users from existing server to the new server?

Thanks, Jiuan

Tags (3)

starcher
Influencer

You are getting that error because the passwords for the SSL keys were encrypted under the old splunk.secret. If you copied one from another server the hash no longer works. You need to re-enter the password in the appropriate conf files and let Splunk re-encrypt it.

ridwanahmed
Path Finder

what do you mean in the appropriate conf files?

0 Karma

Stephen_Sorkin
Splunk Employee
Splunk Employee

You should move etc/apps/*/local/... and etc/users/... to capture all user data. The first directory hierarchy brings over shared objects and the second brings over private objects. Additionally you should configure authentication to yield the same set of users.

marco_sulla
Path Finder

You have to copy also the $SPLUNK_HOME/etc/system/local/authorize.conf file if you have one.

0 Karma

nouse66
New Member

I got that SSL error at first also. I fixed it by copying this setting from the other server's etc/system/local/server.conf:
[sslConfig]
sslKeysfilePassword =

0 Karma

jiuan
Explorer

hmmm..... got this error:

ERROR SSLCommon - Can't read key file /home/a478377/workspace/splunk/etc/auth/server.pem

0 Karma

jiuan
Explorer

Thanks, Stephen!

I just talked to Mick about how to copy the authentication too. He mentioned that all I need is copying etc/passwd and etc/auth/splunk.secret.

Get Updates on the Splunk Community!

Prove Your Splunk Prowess at .conf25—No Prereqs Required!

Your Next Big Security Credential: No Prerequisites Needed We know you’ve got the skills, and now, earning the ...

Splunk Observability Cloud's AI Assistant in Action Series: Observability as Code

This is the sixth post in the Splunk Observability Cloud’s AI Assistant in Action series that digs into how to ...

Splunk Answers Content Calendar, July Edition I

Hello Community! Welcome to another month of Community Content Calendar series! For the month of July, we will ...