Experiencing error on Splunk universal forwarder 8.2.5

[ekomaneeyah2020]

Hello team,

I am new to using SPLUNK. I have a little problem.

After installing my splunk server, I started setting up my universal-forwarder on the kali linux client.

where I type the commands below:

──(root㉿kali)-[/opt/splunkforwarder/bin]
└─# ./splunk add forward-server 192.168.0.24:9997
Splunk username: root
Password:
Login failedI have an error message on the login/password

for your information:
- ping is OK between client and server
- I connect to the web interface of the server on the client.
- The port opening parameters on the server 9997/8089 ok
- I don't think I have a login/password problem since it's the same one I use on the server.
- I changed the password to see if it's not a keyboard problem at the letter level without success

Do you have an idea please?

Regards

[ekomaneeyah2020]

I was able to solve the problem. when you set the forwader on the kali client like my case, at one level you are asked to create an admin password. the administrator password must be that of the splunk server. And he was the one I was asked for long after

[m_pham]

Did you try "changeme" as the password and username "admin"?