<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Splunk server login in Security</title>
    <link>https://community.splunk.com/t5/Security/Splunk-server-login/m-p/34699#M1168</link>
    <description>&lt;P&gt;thanks luke.&lt;/P&gt;</description>
    <pubDate>Mon, 27 Jun 2011 12:06:19 GMT</pubDate>
    <dc:creator>stevengrigg</dc:creator>
    <dc:date>2011-06-27T12:06:19Z</dc:date>
    <item>
      <title>Splunk server login</title>
      <link>https://community.splunk.com/t5/Security/Splunk-server-login/m-p/34697#M1166</link>
      <description>&lt;P&gt;I just installed the current version of Splunk on my Fedora Core 14 laptop.  There is an option at login for Splunk Server.  I have no idea what the password is (neither changeme, nor my user or root passwords work).  Can anyone help?  Thanks in advance.&lt;/P&gt;</description>
      <pubDate>Sun, 26 Jun 2011 18:38:53 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunk-server-login/m-p/34697#M1166</guid>
      <dc:creator>stevengrigg</dc:creator>
      <dc:date>2011-06-26T18:38:53Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk server login</title>
      <link>https://community.splunk.com/t5/Security/Splunk-server-login/m-p/34698#M1167</link>
      <description>&lt;P&gt;Are you referring to logging into Splunk itself or an account on the OS created for Splunk to run under?&lt;/P&gt;

&lt;P&gt;If the former, then you can reset the Splunk password by following the steps below (needs filesystem access):&lt;/P&gt;

&lt;UL&gt;
&lt;LI&gt;Move the $SPLUNK_HOME/etc/passwd file to passwd.bak&lt;/LI&gt;
&lt;LI&gt;Restart splunk. After the restaringt you should be able to login using the default login (admin/changeme).&lt;/LI&gt;
&lt;LI&gt;If you created other user accounts, copy those entries from the backup file into the new passwd file and restart splunk.&lt;/LI&gt;
&lt;/UL&gt;

&lt;P&gt;If your looking for the latter (to login using the Splunk account on the OS) then you'll find you will not be able to login into the account that the Splunk installer created since it does not have a valid password defined since the account is only designed to be used by the local Splunk processes. The password for the splunk account in /etc/shadow is usually set to an exclamation mark which prevents anyone from logging in with this password.&lt;/P&gt;</description>
      <pubDate>Mon, 27 Jun 2011 06:30:20 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunk-server-login/m-p/34698#M1167</guid>
      <dc:creator>LukeMurphey</dc:creator>
      <dc:date>2011-06-27T06:30:20Z</dc:date>
    </item>
    <item>
      <title>Re: Splunk server login</title>
      <link>https://community.splunk.com/t5/Security/Splunk-server-login/m-p/34699#M1168</link>
      <description>&lt;P&gt;thanks luke.&lt;/P&gt;</description>
      <pubDate>Mon, 27 Jun 2011 12:06:19 GMT</pubDate>
      <guid>https://community.splunk.com/t5/Security/Splunk-server-login/m-p/34699#M1168</guid>
      <dc:creator>stevengrigg</dc:creator>
      <dc:date>2011-06-27T12:06:19Z</dc:date>
    </item>
  </channel>
</rss>

