Reset my splunk web account

kvuorine — Mon, 02 Nov 2020 18:36:25 GMT

hi splunk,

i have a splunk account and trialing our company splunk server installation (not cloud)

i forgot the account password, and tried to reset it on your web portal, no success (no email sent to proceed resetting)

thanks in advance,

Kristian Vuorinen

Re: Reset my splunk web account

richgalloway — Mon, 02 Nov 2020 18:49:53 GMT

Hello,

I removed your personal information because this is a public forum, not Splunk technical support.

It's not clear what password you wish to reset. To reset your splunk.com password, contact Splunk Support using one of the phone numbers listed at https://www.splunk.com/en_us/about-splunk/contact-us.html#tabs/tab_parsys_tabs_CustomerSupport_4

If you have Splunk Enterprise installed on one of your servers and need to reset the admin password then see the procedures at https://community.splunk.com/t5/Security/Splunk-Admin-Password/m-p/326020 , which are summarized below.

You need to save the $SPLUNK_HOME/etc/passwd file, removing the original.
You need to edit a file called $SPLUNK_HOME/etc/system/local/user-seed.conf (this will probably be a new file).
You need to add a stanza called [user_info] and specify the admin user and what password you wish to use.
Then restart Splunk. This will generate a new $SPLUNK_HOME/etc/passwd file.
If you had something other than vanilla in the passwd file (other lines, other admin users) you need to put them back into the new passwd file and restart Splunk again.