topic Re: Splunk Not Starting - Cant Log in in Splunk Enterprise

Splunk Not Starting - Cant Log in

lucoot — Thu, 29 May 2014 21:10:33 GMT

Windows 7 64Bit

Splunk ran after first installating. After reset, I am unable to start it.
When I run "Splunk.exe" command prompt opens for a flash and mentions "access to RegCreatKeyEx denied".
No splunk services are running at all after executing.
When I attempt to log in it states "invalid username and password"

Here is the splunkd.log05-29-2014 13:49:02.066 -0700 ERROR AuthenticationManagerSplunk - Login failed. Incorrect Login for user: admin 05-29-2014 13:56:45.463 -0700 ERROR UserManagerPro - Login failed for unknown user="lucoot""

Re: Splunk Not Starting - Cant Log in

lguinn2 — Thu, 29 May 2014 22:56:06 GMT

This is not how you start Splunk. On Windows, Splunk runs as a service. Go to the Services panel and start Splunk from there.

To login to Splunk, you must use a web browser. In Firefox or IE, for example, you could do this:

http://hostname:8000

where hostname is the domain name of the machine where you installed Splunk. The default user name is admin and the initial password is changeme.

There will not be a user named lucoot unless you created a user by that name. If you are unsure, go to the directory where you installed Splunk (call it splunk_home) and then go to the etc subdirectory and look at the file called passwd

type splunk_home\etc\passwd

You won't be able to see the passwords, since they are encrypted, but at least you will be able to see what users exist.
If you have forgotten the password, you can reset it following the directions here: How could I reset the Admin password?

Re: Splunk Not Starting - Cant Log in

lucoot — Thu, 29 May 2014 23:08:13 GMT

I am using it through the browser, that is how I am typing in my password and username. Which do not work.
The service is running, I was mistakenly looking at running applications.

Thanks

Re: Splunk Not Starting - Cant Log in

lucoot — Fri, 30 May 2014 16:21:52 GMT

I am using it through the browser, that is how I am typing in my password and username. Which do not work. Sorry, the service is running, I was mistakenly looking at running applications.

Thanks!

Re: Splunk Not Starting - Cant Log in

adilsonbna — Thu, 23 Mar 2017 21:48:50 GMT

I've got the same issue. It not admin password from Splunk server. Login admin and password is default by client one.

I just used command
./splunk add forward-server :9997

Splunk username: admin
Password: changeme
Added forwarding to: xx.xx.xx.xxx:9997.

It works!