Getting Data In
Highlighted

Cannot Login to Forwarder

New Member

After installing the Forwarder, I cannot login to it. I have executed SPLUNK CLEAN ALL, but cannot login. I also tried placing the user-seed.conf in the etc/system/local directory, but I still cannot login. What am I missing?

Tags (2)
0 Karma
Highlighted

Re: Cannot Login to Forwarder

Builder

When you say 'log in' you are trying to connect to it through the GUI? It doesn't support that. You can access it via the CLI and there is a rich thread on the commands at http://docs.splunk.com/Documentation/Splunk/latest/Admin/CLIadmincommands (thanks Drainy 😉

0 Karma
Highlighted

Re: Cannot Login to Forwarder

New Member

I am trying to login through the CLI. The Splunk Clean All is a CLI command.

0 Karma
Highlighted

Re: Cannot Login to Forwarder

Legend

How are you trying to login? What credentials are you using?

0 Karma
Highlighted

Re: Cannot Login to Forwarder

Was the admin's default password of "changeme" ever changed? If you can not figure out the password, then

  1. stop the UF
  2. rename the $SPLUNK_HOME/etc/passwd file

Now you have the default credentials (admin/changeme) back.

However, if you want to achieve similar results to clean all, then:

  1. stop the UF
  2. rename $SPLUNK_HOME/var to something else
  3. rename $SPLUNK_HOME/etc/users to something else
  4. start the UF
  5. if everything works fine, drop the renamed folders.