Splunk Enterprise

Do CM and SH manage two different user scheme?

chenyt
Explorer

Hi, 

I just install a new cluster with 3SH and 3IDX and 1CM.

I login to CM from WebUI as admin to change password and create users, roles.

Then I try to use the new password to login from SH WebUI as admin, but fail, then I try the old password , succeed. Then I found the users and roles I created on CM WebUI are not list in SH.

Do CM and SH manage two different user scheme? I can't find this information in document, can anyone point me the right way? Thanks.

0 Karma
1 Solution

richgalloway
SplunkTrust
SplunkTrust

The Cluster Manager controls your indexer cluster only.  It has no control over search heads.

There is no need for users and roles to be configured on indexers and the only user the CM needs is admin.

To configure users and roles in a SHC, just sign in to a search head and configure them.  The cluster will replicate the new users to other members automatically.

---
If this reply helps you, Karma would be appreciated.

View solution in original post

chenyt
Explorer

Thanks for the reply. I did read that part CM controls Indexers and Deployer controls SH in the documents, but I didn't realize that I need to manage different user schemes.

Thanks for answer the question. Have a nice day.

0 Karma

richgalloway
SplunkTrust
SplunkTrust

The Cluster Manager controls your indexer cluster only.  It has no control over search heads.

There is no need for users and roles to be configured on indexers and the only user the CM needs is admin.

To configure users and roles in a SHC, just sign in to a search head and configure them.  The cluster will replicate the new users to other members automatically.

---
If this reply helps you, Karma would be appreciated.
Get Updates on the Splunk Community!

The Splunk Success Framework: Your Guide to Successful Splunk Implementations

Splunk Lantern is a customer success center that provides advice from Splunk experts on valuable data ...

Splunk Training for All: Meet Aspiring Cybersecurity Analyst, Marc Alicea

Splunk Education believes in the value of training and certification in today’s rapidly-changing data-driven ...

Investigate Security and Threat Detection with VirusTotal and Splunk Integration

As security threats and their complexities surge, security analysts deal with increased challenges and ...