After installing the Splunk Trial version on Windows, why is it not allowing me to login?

[ramseydlcp]

I just installed the Splunk Trial version on a Windows 10 64 bit PC but it will not allow me to login. It says username/password not correct - notify the Splunk administrator. But the Splunk administrator would be me.

[fdrean]

Hello jethompson,
I just installed the Splunk Trial version on a Windows 7 64 bit PC (older release and I replaced enttrial.lic file in dowload-trial directory)
I tried your tips and it worked well for me.

Thanks

[jethompson_splu]

@fdrean -- Glad to hear that information helped you out.

[jethompson_splu · Accepted solution]

Hello ramseydlcp,

As @ChrisG stated the default username/password for a Splunk Installation are:

username: admin
password: changeme

Upon first login you will be asked to change the Admin Password. Now if this Username/Password combination is not working for the First Login, then you would need to attempt the steps that @MuS suggested in regards to removing the passwd file in the Splunk etc/ directory.

The typical installation directory on a Windows Instance is: C:\Program Files\Splunk\
http://docs.splunk.com/Documentation/Splunk/6.5.2/Installation/InstallonWindows

By default, the installer puts Splunk Enterprise into \Program Files\Splunk on the system drive.
This documentation set refers to the Splunk Enterprise installation directory as
$SPLUNK_HOME or %SPLUNK_HOME%.
Blockquote

So for a Windows Installation the passwd file would be located: C:\Program Files\Splunk\etc\passwd . As a "Best Practice" I would recommend making a "backup" of the original file just for "Safety". Once the file has either been removed or renamed (to make a backup) then restart your Splunk Service on that Windows machine and you should be able to login as the Admin user using the Splunk Default Username/Password of admin/changeme

[MuS]

goto to %SPLUNK_HOME%/etc (where %SPLUNK_HOME% is the install directory of your Splunk) and delete the file passwd restart the Splunk service and it will re-create the file and you will be able to login using the default user and pwd which is the one provided by @ChrisG

[ChrisG]

It says this when you try admin/changeme?