topic Re: Login failed when adding splunk universal forwarder in Security

Why did Login failed when adding splunk universal forwarder?

Poojitha — Mon, 11 Apr 2022 15:40:30 GMT

Hi All,

I am trying to install splunk universal forwarder. While adding the forwarder its asking for admin. username and password :

command : /opt/splunkforwarder/bin/splunk add forward-server

I checked results on the google and tried the default credentials admin/changeme. Its not working.

I am installing this UF on ec2 linux instance. I am stuck with the login failure here.

Please anyone help me on this.

Thanks in Advance,
Poojitha NV

Re: Login failed when adding splunk universal forwarder

tshah-splunk — Mon, 11 Apr 2022 12:06:42 GMT

Hello @Poojitha ,

The credentials that you need to add here are the credentials that you set initially when Splunk was set up and started in your instance. You can refer to previous questions on the community on steps to do if admin creds were lost - https://community.splunk.com/t5/Security/How-to-Reset-the-Admin-password/m-p/10622.

Re: Login failed when adding splunk universal forwarder

Poojitha — Sat, 16 Apr 2022 17:38:40 GMT

Thanks @tshah-splunk .