topic Re: Remove "First time logging in? Splunk's default credentials are" in Security

Remove "First time logging in? Splunk's default credentials are"

sloshburch — Sun, 07 Jun 2020 16:57:35 GMT

Since we have LDAP in place and audit restrictions, I have disabled the system account by backing up passwd to passwd.off and creating an empty passwd file. Unfortunately, this presents the "First time logging in? Splunk's default credentials are" message when navigating to splunk's log in page.

Any ideas on how to disable that message while still having the system account disabled?

Re: Remove "First time logging in? Splunk's default credentials are"

sloshburch — Tue, 17 Dec 2013 17:27:09 GMT

Looks like this might be it: http://answers.splunk.com/answers/102966/how-can-i-disable-password-change-request-at-first-time-login-to-splunkweb

touch ${SPLUNK_HOME}/etc/.ui_login

Re: Remove "First time logging in? Splunk's default credentials are"

sloshburch — Fri, 20 Dec 2013 16:50:03 GMT

Yea, that solved it.

Re: Remove "First time logging in? Splunk's default credentials are"

putnamblake — Tue, 19 May 2020 06:42:59 GMT

Shortest and best answer all these years later.