Reset password in splunk for admin

syazwani — Fri, 01 Dec 2023 01:58:02 GMT

Hi, how can we reset password for admin user from CLI. Currently i have indexer using Splunk 9.1.1 in testing environment and i forgot the username and password. There were some bin command that will prompt for Splunk username and password, so i need to reset the username and password. Please help. Thank you.

Re: Reset password in splunk for admin

SanjayReddy — Fri, 01 Dec 2023 06:27:47 GMT

Hi @syazwani

please follow below steps to reset password
go to <SPlunk installation directory>/splunk/etc/

under this location file called passwd

rename it to passwd.backup

go to following location

<SPlunk installation directory>/splunk/etc/system/local

create new file user-seed.conf
inside user-seed file

add following contents

[user_info]
USERNAME = admin
PASSWORD = <newpassword>

and restart splunk from cmd

<SPlunk installation directory>/splunl/bin/

splunk restart

----
Regards,
Sanjay Reddy

----
If this reply helps you, Karma would be appreciated

topic Reset password in splunk for admin in Security

Reset password in splunk for admin

Re: Reset password in splunk for admin