Getting Data In

Why are Credentials not working for splunk universal forwarder agent

Poojitha
Communicator

Hi All,

  I have installed splunk universal forwarder on linux instance. Version is 8.2.4. I have created admin account as well through ansible play.  I am passing username and password through ansible command line, creating user-seed.conf file and copying the username and password here.

This way :

- name: Copy Contents to user-seed.conf file
copy:
      dest: /opt/splunkforwarder/etc/system/local/user-seed.conf
      content: |
           [user_info]
           USERNAME = "{{ username }}"
           PASSWORD = "{{ password }}"

user-seed.conf file is getting created successfully. I am starting splunk UF through ansible play later . So, user seed.conf file gets deleted and passwd file is getting created successfully.

But when I try to run command ./splunk list forward-server, it asks me for username and password. I gave same credentials what I gave through ansible command line. But login is getting failed.

I am not understanding what is going wrong. Please help me 

Regards,
NVP
Labels (2)
Tags (1)
0 Karma
Get Updates on the Splunk Community!

Upcoming Webinar: Unmasking Insider Threats with Slunk Enterprise Security’s UEBA

Join us on Wed, Dec 10. at 10AM PST / 1PM EST for a live webinar and demo with Splunk experts! Discover how ...

.conf25 technical session recap of Observability for Gen AI: Monitoring LLM ...

If you’re unfamiliar, .conf is Splunk’s premier event where the Splunk community, customers, partners, and ...

A Season of Skills: New Splunk Courses to Light Up Your Learning Journey

There’s something special about this time of year—maybe it’s the glow of the holidays, maybe it’s the ...