This is on a new installation. Linux OS. The install and setup went smoothly enough and using some canned config files (i.e inputs.conf) everything seems to be working (forwarding and indexing). The problem is using the CLI on the forwarder. As the user "splunk" when I exercise the CLI, I get different results. Some commands (the cheap ones like "./splunk help commands") work. Those that require authentication like "./splunk show server name" responds with "Your session is invalid. Please login." The login always fails despite using the correct username/password. Any ideas as to cause or correction?
Thanks but I (we) did change the admin password and it does work from the web console. Right now, because it says "...session invalid" it seems to not recognize the "splunk" user, so I believe it isn't a password problem by itself.