topic Re: Cannot Login to Forwarder in Getting Data In

Cannot Login to Forwarder

pchukwuma — Fri, 01 Feb 2013 09:54:37 GMT

After installing the Forwarder, I cannot login to it. I have executed SPLUNK CLEAN ALL, but cannot login. I also tried placing the user-seed.conf in the etc/system/local directory, but I still cannot login. What am I missing?

Re: Cannot Login to Forwarder

DaveSavage — Fri, 01 Feb 2013 10:02:55 GMT

When you say 'log in' you are trying to connect to it through the GUI? It doesn't support that. You can access it via the CLI and there is a rich thread on the commands at http://docs.splunk.com/Documentation/Splunk/latest/Admin/CLIadmincommands (thanks Drainy 😉

Re: Cannot Login to Forwarder

Ayn — Fri, 01 Feb 2013 10:47:48 GMT

How are you trying to login? What credentials are you using?

Re: Cannot Login to Forwarder

pchukwuma — Fri, 01 Feb 2013 16:37:25 GMT

I am trying to login through the CLI. The Splunk Clean All is a CLI command.

Re: Cannot Login to Forwarder

Paolo_Prigione — Mon, 04 Feb 2013 21:47:59 GMT

Was the admin's default password of "changeme" ever changed? If you can not figure out the password, then

stop the UF
rename the $SPLUNK_HOME/etc/passwd file

Now you have the default credentials (admin/changeme) back.

However, if you want to achieve similar results to clean all, then:

stop the UF
rename $SPLUNK_HOME/var to something else
rename $SPLUNK_HOME/etc/users to something else
start the UF
if everything works fine, drop the renamed folders.