I'm trying to reset the password on one of my indexers, but I do not see a passwd.bak file in the etc directory. All I see is the passwd file. How do I reset my password?
If you delete that passwd file, and restart splunk, it should reset the credentials to admin // changeme.
View solution in original post
Thanks that worked!
mrtolu6, would you mind selecting my answer as the answer if that worked for you? 😄