in Technology by

How to reset Splunk Admin password?

1 Answer

0 votes
by

Resetting Splunk Admin password depends on the version of Splunk. If we are using Splunk 7.1 and above, then we have to follow the below steps:

  • First, we have to stop our Splunk Enterprise
  • Now, we need to find the ‘passwd’ file and rename it to ‘passwd.bk’
  • Then, we have to create a file named ‘user-seed.conf’ in the below directory:
$SPLUNK_HOME/etc/system/local/

In the file, we will have to use the following command (here, in the place of ‘NEW_PASSWORD’, we will add our own new password):

[user_info]

PASSWORD = NEW_PASSWORD
  • After that, we can just restart the Splunk Enterprise and use the new password to log in

Now, if we are using the versions prior to 7.1, we will follow the below steps:

  • First, stop the Splunk Enterprise
  • Find the passwd file and rename it to ‘passw.bk’
  • Start Splunk Enterprise and log in using the default credentials of admin/changeme
  • Here, when asked to enter a new password for our admin account, we will follow the instructions

Note: In case we have created other users earlier and know their login details, copy and paste their credentials from the passwd.bk file into the passwd file and restart Splunk.

Related questions

0 votes
    In my password reset function the user can put in whatever he/she wants. It does not even needs ... JavaScript Questions for Interview, JavaScript MCQ (Multiple Choice Questions)...
asked Apr 17, 2022 in Education by JackTerrance
0 votes
    I want to create a request from my application. (iOS and Android - Coded with Xamarin). Explaination: ... Questions for Interview, JavaScript MCQ (Multiple Choice Questions)...
asked Apr 2, 2022 in Education by JackTerrance
0 votes
    What is the command used to check the running Splunk processes on Unix/Linux?...
asked Oct 31, 2020 in Technology by JackTerrance
0 votes
    What do Splunk Licenses specify?...
asked Oct 31, 2020 in Technology by JackTerrance
0 votes
    Can you name a few most important configuration files in Splunk?...
asked Oct 31, 2020 in Technology by JackTerrance
0 votes
    What is a Splunk Forwarder? What are the types of Splunk Forwarders?...
asked Oct 31, 2020 in Technology by JackTerrance
0 votes
    Can anyone tell me how to land a job with Salesforce Admin Certification? Select the correct answer from above options...
asked Jan 19, 2022 in Education by JackTerrance
0 votes
    What are the ways to customize the functionality of the Django admin interface?...
asked Jul 2, 2021 in Technology by JackTerrance
0 votes
    What do you mean by admin in WebLogic?...
asked Jun 10, 2021 in Technology by JackTerrance
0 votes
    If the AD B2B account is e-reference, can an admin block this? Could an admin prevent their users from being guest users in another tenant?...
asked Mar 10, 2021 in Technology by JackTerrance
0 votes
    When I try to open the Plesk Login Page via :8443 I get the Error: ERROR: Uncaught Error: Class ... JavaScript Questions for Interview, JavaScript MCQ (Multiple Choice Questions)...
asked May 10, 2022 in Education by JackTerrance
0 votes
    [additional information] I asked for a way to disable caching site-wide. This is probably overkill, because ... Questions for Interview, JavaScript MCQ (Multiple Choice Questions)...
asked Apr 17, 2022 in Education by JackTerrance
0 votes
    Suppose I have a model Order, which has a column num -- an order number. Now I want to filter ... , JavaScript Questions for Interview, JavaScript MCQ (Multiple Choice Questions)...
asked Feb 12, 2022 in Education by JackTerrance
0 votes
    How can a job configuration be reset to an earlier version/state?...
asked Sep 14, 2021 in Technology by JackTerrance
0 votes
    How can a job configuration be reset to an earlier version/state?...
asked Jul 17, 2021 in Technology by JackTerrance
...