All Apps and Add-ons

REST API password

ccsfdave
Builder

I set the darn thing over 3 years ago and it is not any of my usual passwords. Is there a way to recover the REST API password? I am talking about the one that defaults as "changeme"

Also if I can recover it, will anything break e.g. forwarders?

Thanks!

0 Karma
1 Solution

jkat54
SplunkTrust
SplunkTrust

You can revert to the default encrypted password in $splunk_home/etc/passwd .

Just install on a test server/laptop and copy the line that is for the admin user. Then the pass will be changeme again.

Nothing will break unless you have scripts that call the API. They'll need to be updated with the new password you set.

Also the rest api pass is the same as the web ui user/passes. Just making sure you know that.

View solution in original post

jkat54
SplunkTrust
SplunkTrust

You can revert to the default encrypted password in $splunk_home/etc/passwd .

Just install on a test server/laptop and copy the line that is for the admin user. Then the pass will be changeme again.

Nothing will break unless you have scripts that call the API. They'll need to be updated with the new password you set.

Also the rest api pass is the same as the web ui user/passes. Just making sure you know that.

ccsfdave
Builder

OH if the API pwd is the same as the UI, I know that but it keeps choking on some of the special characters in my password. Do I need to escape them?

0 Karma

jkat54
SplunkTrust
SplunkTrust

Yep

 'Password\!' 

For example maybe Google "which characters to escape with curl/whatever you're using"

0 Karma

ccsfdave
Builder

Sweet,

No need to change or recover, just needed the escape characters. I am good now!

0 Karma
Get Updates on the Splunk Community!

Stay Connected: Your Guide to July and August Tech Talks, Office Hours, and Webinars!

Dive into our sizzling summer lineup for July and August Community Office Hours and Tech Talks. Scroll down to ...

Edge Processor Scaling, Energy & Manufacturing Use Cases, and More New Articles on ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Get More Out of Your Security Practice With a SIEM

Get More Out of Your Security Practice With a SIEMWednesday, July 31, 2024  |  11AM PT / 2PM ETREGISTER ...