https://community.splunk.com/t5/Security/Unable-to-sometimes-login/m-p/173160#M5116 <P>During this past week there have occassionally been times when I have tried to log into Splunk and wasn't able to. I have been able to get around the issue by restarting splunkd. Another time I used another browser and that worked. The account I'm using is through LDAP. To test my sanity, I have been copying and pasting the password into one service that also uses LDAP to authenticate. When I copy and paste into Splunk, it doesn't always work. The error I get is simply. "Invalid Username or Password".</P> <P>I can't think of what network or splunk issues would be causing this. Any info would be appreciated.</P> <P>Thanks! </P> Thu, 13 Aug 2015 13:51:58 GMT Reid_splunk 2015-08-13T13:51:58Z https://community.splunk.com/t5/Security/Unable-to-sometimes-login/m-p/173160#M5116 <P>During this past week there have occassionally been times when I have tried to log into Splunk and wasn't able to. I have been able to get around the issue by restarting splunkd. Another time I used another browser and that worked. The account I'm using is through LDAP. To test my sanity, I have been copying and pasting the password into one service that also uses LDAP to authenticate. When I copy and paste into Splunk, it doesn't always work. The error I get is simply. "Invalid Username or Password".</P> <P>I can't think of what network or splunk issues would be causing this. Any info would be appreciated.</P> <P>Thanks! </P> Thu, 13 Aug 2015 13:51:58 GMT https://community.splunk.com/t5/Security/Unable-to-sometimes-login/m-p/173160#M5116 Reid_splunk 2015-08-13T13:51:58Z https://community.splunk.com/t5/Security/Unable-to-sometimes-login/m-p/173161#M5117 <P>Can you check in the splunk _internal logs for error related to your login. I faced a similiar issue and was able to confirm the root cause as connection getting dropped with the LDAP server.</P> <P>The error in the _internal logs during the same time will confirm this.</P> Thu, 13 Aug 2015 22:39:24 GMT https://community.splunk.com/t5/Security/Unable-to-sometimes-login/m-p/173161#M5117 jensonthottian 2015-08-13T22:39:24Z https://community.splunk.com/t5/Security/Unable-to-sometimes-login/m-p/173162#M5118 <P>Hi @jensonthottian </P> <P>Where can I find _internal logs? I am having the same issue as well. With the error below upon checking /opt/splunk/var/log/splunk/audit.log</P> <P>02-26-2019 14:46:03.762 +0000 INFO AuditLogger - Audit:[timestamp=02-26-2019 14:46:03.762, user=galzaga!, action=login attempt, info=failed, src=172.21.3.47][n/a]</P> Tue, 26 Feb 2019 14:49:52 GMT https://community.splunk.com/t5/Security/Unable-to-sometimes-login/m-p/173162#M5118 kevinalzaga 2019-02-26T14:49:52Z