topic Re: unable to login to splunk enterprise on my local machine i get invalid username or password in Security

unable to login to splunk enterprise on my local machine i get invalid username or password

khonzoh — Sat, 13 May 2017 16:00:25 GMT

I downloaded and configured splunk enterprise and mhn app, and I was able to view my data. But I can not login now. I have tried the same username and password, still could not login. Please help

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

Richfez — Sun, 14 May 2017 01:25:58 GMT

If you didn't change the default username/password, it's admin, changeme. Also check your caps lock key. 🙂

If those don't resolve it, which I expect it won't, then you can reset the passwords of the system if you have local access to it.

NOTE this will do two things - remove ALL usernames and passwords from the system except admin, and will reset the admin password to "changeme".

Linux:
Open a terminal session. Into there type:

cd /opt/splunk/etc/
sudo mv passwd passwd.bak

Then restart your Splunk.

Windows:
Open an elevated command prompt. (Click start, type "command" and when you see "Command Prompt" show up right-click on it and select "Run as administrator). Into there type:

cd \program files\splunk\etc
ren passwd passwd.bak

Then restart your Splunk.

Let us know if you have any difficulties!

Happy Splunking,
Rich

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

Shitiz — Sun, 29 Apr 2018 09:15:52 GMT

I am also facing this issue..I followed the above mentioned steps but still getting the error...

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

xpac — Sun, 29 Apr 2018 13:51:39 GMT

Could you give some details on Splunk version, Windows or Linux, etc?

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

DonSmith — Mon, 30 Apr 2018 21:21:18 GMT

I too am unable to login on the free enterprise version, even after stopping splunk, renaming passwd, and restarting. I get "No users exist. Please set up a user."

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

Reshma_Vidhate — Mon, 28 May 2018 05:18:29 GMT

I have followed above mention steps for windows machine. But I am still not able to login for SPlunk Enterprise

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

niketn — Mon, 28 May 2018 08:30:29 GMT

@Reshma_Vidhate if you are trying to install Splunk Enterpris 7.1 it would ask your to reset your password during the installation. So uninstall and reinstall and make a note of updated admin password during installation.

If you want to reset existing password in 7.1, you should refer to following answer by @cbreshears: https://answers.splunk.com/answers/834/how-to-reset-the-admin-password.html

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

Richfez — Mon, 28 May 2018 12:02:28 GMT

Hi, @Reshma_Vidhate,

You would be better served to ask your own Question - a new thread will let everyone work through your problem specifically and is much more likely to get you a good answer.

And it's easy! For the fastest, best answer, include specifics: Splunk version, if there was anything "password related" you did when you installed it (like did you see a prompt for a password? Or did you not?), which platform you are on - Windows or Linux, how exactly are you trying to log in (url involved?) and finally what exactly does it do when you try.

Many thanks,
Rich

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

akhilasivasanka — Thu, 14 Jun 2018 07:24:43 GMT

For Splunk 7.x.x version and later, try the below.

username = admin
password = The password specified while installation

If you are still unable to login, remove the password file from ****/etc/passwd and reload the enterprise login page and try logging in.

Thanks,

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

MuS — Thu, 14 Jun 2018 09:35:21 GMT

Well, this way you would have successfully killed all OS users but not the Splunk users 😉
Next time try $SPLUNK_HOME/etc/passwd instead ...

cheers, MuS

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

somebloke — Sun, 18 Nov 2018 12:23:50 GMT

This is a frustrating set of affairs, this program seems to not be intuitive and or/sensible. I can log into my splunk account, I have changed my passwords, I have followed these steps numerous times yet splunk enterprise will not let me log in. Bodes well for an assignment due this week does it not?

Re: unable to login to splunk enterprise on my local machine i get invalid username or password

somebloke — Sun, 18 Nov 2018 12:25:27 GMT

I have followed the admin steps multiple times, I can log into my splunk account, yet simply cannot log into splunk enterprises. Not very helpful in the slightest.