Refine your search:

Can Splunk Deployment Server push out new admin passwords?

1

I need to push out a new admin password to all of my remote Splunk instances/forwarders.

Can I use Splunk Deployment Manager to do this or do I need to use another tool?

asked 23 Apr '10, 18:12

maverick's gravatar image

maverick ♦
2.6k●6●5●73
accept rate: 14%

edited 26 Apr '10, 06:12

gkanapathy's gravatar image

gkanapathy ♦
26.2k●1●6●22
2 Answers:
oldestnewestmost voted
4

You would need another tool. To push out new Splunk passwords, would need to, on each node, either:

  • execute the command ./splunk edit user myuserid -password mynewpassword. Deployment Server can not easily be used to execute commands.
  • replace the file etc/passwd, etc/auth/splunk.secret, and all other files that contain encrypts using etc/auth/splunk.secret which usually includes just etc/system/local/server.conf. These files much of course all match via splunk.secret. Deployment Server can not be effectively used to distribute these files.
link

answered 23 Apr '10, 21:27

gkanapathy's gravatar image

gkanapathy ♦
26.2k●1●6●22
accept rate: 42%

What about using something like Puppet? I imagine that should work.

(23 Apr '10, 21:30) maverick ♦

yes, puppet can work by pushing out copies of the above-named files to remote nodes, or by executing a command.

(23 Apr '10, 21:56) gkanapathy ♦

What is Puppet? Can someone provide a link if this is a recommended tool?

(26 Apr '10, 15:05) Lowell ♦

Puppet is perhaps a bit large for the word 'tool'. Like a software build engine, you kind of have to sink a certain amount of time into them to see big returns. http://www.puppetlabs.com/ cfengine is comparable. http://www.cfengine.org/

(26 Apr '10, 18:58) jrodman ♦
1

No, deployment server only pushes out App configurations, nothing to do with users, passwords or Splunk version updates. You might want to file an Enhancement Request if this is something you foresee a need for though.

link

answered 23 Apr '10, 18:25

Mick's gravatar image

Mick ♦
4.0k●1●3●27
accept rate: 52%

Post your answer
toggle preview

Copyright © 2005-2012 Splunk, Inc. All rights reserved.