topic Re: Universal Forwarder Credentials in Getting Data In

Universal Forwarder Credentials

JMonk — Thu, 03 Oct 2019 22:51:50 GMT

What is the correct way to upgrade the credentials on a universal forwarder. Ours will expire soon, When I run splunk install app -update, getting the following error:
Cannot perform action "POST" without a target name to act on.

Re: Universal Forwarder Credentials

richgalloway — Thu, 03 Oct 2019 23:31:49 GMT

What credentials are you trying to change? What is the exact command you're running?

Re: Universal Forwarder Credentials

ivanreis — Fri, 04 Oct 2019 01:22:40 GMT

please try this command to change the local user on universal forwarder for admin user.
linux command : /opt/splunkforwarder/bin/splunk edit user admin -password -auth admin:

windows command : c:\bin\splunk edit admin -password -auth admin:
depends on the number of clients you have to apply this change I recommend to use a script or other tools to deploy new configuration to you environment.

Re: Universal Forwarder Credentials

woodcock — Fri, 04 Oct 2019 02:30:58 GMT

There is nothing in Splunk that would case your Universal Forwarder credentials to expire. Are you talking about your SSL certificate?