2. Create an Object account, a user and access key on first FB

The hierarchy to host an object in FlashBlade requires an object account, a user with a connection key and an S3 bucket.

1. On the FlashBlade, go to the Object Store tab under the Storage view and click the + (add) button against the Accounts section.

   

2. Provide an account name and click the Create button.

   

3. Under the Storage > Object Store > Accounts section, click the account that was created in the previous step. This should show the Users section. Click the + (add) button to create a new user.

   

4. Provide a username and click the Create button.

   

5. Select the relevant access policies based on your security requirements. For convenience, select the "pure:policy/full-access" policy and click Add.

   At the minimum, for Splunk Multisite to work, you need the following policies object-delete, object-list, object-read, object-write .

   Note:

   The version-delete policy is not required as the Splunk indexes.conf parameter remote.s3.supports_versioning = false is a requirement for Splunk Multisite so the objects can be deleted by placing the delete marker rather than deleting by a version. Deleting by the version will not propagate the deletes to the replicated FlashBlade and you might see object differences between two FlashBlades and hence the parameter remote.s3.supports_versioning should always be set to False.

   

6. You have the option of creating a new key or importing an existing key. Go ahead and select “Create a new key” and click the Create button.

   

7. Make a note of the access key and secret key. Optionally use the CSV or JSON button to download them as a file in their respective format. This access key and secret key will be imported on to the second FlashBlade.

   

   Note:

   Save or download the key information before closing the popup. The secret access key can only be accessed during the key creation confirmation and cannot be viewed or accessed after the confirmation popup is closed.