topic Re: Script for Splunk admin password change in Security

Script for Splunk admin password change

inayath_khanin1 — Tue, 03 Aug 2021 06:25:05 GMT

Hi Folks,

Can anyone please help me with a script that help to change splunk admin password across 100 servers? It should prompt what password to change with.

Thanks in advance

codebuilder — Tue, 03 Aug 2021 15:25:52 GMT

If you want the user to be prompted you can do this via the CLI (obviously change your user name and admin password):

splunk edit user test_user -force-change-pass true -auth admin:changeme

Or via the API:

Or if you want to set the new password outright:

splunk edit user <username> -auth admin:<admin_password> -password <password>

inayath_khanin1 — Tue, 03 Aug 2021 16:53:39 GMT

@codebuilder We are actually looking for a script that can be run one one server to change the password of rest servers. can u pls help us with this

codebuilder — Tue, 03 Aug 2021 16:57:16 GMT

You can use bash or python (amongst others) to create a script that incorporates the API or CLI examples provided.