Installation

Do I need to have a username and password for my forwarders?

tchimento_splun
Splunk Employee
Splunk Employee

I'm installing a forwarder but I don't really need an admin account as I rarely ever login to forwarders. What's the recommended way to install Splunk?

Tags (1)
0 Karma
1 Solution

tchimento_splun
Splunk Employee
Splunk Employee

You can start up Splunk with the --no-prompt flag and Splunk will be started up with no users. This way your Splunk deployment can continue to forward data and for security's sake, no one would be able to login. See the docs for a full explanation. http://docs.splunk.com/Documentation/Splunk/7.1.0/Security/Secureyouradminaccount#Create_a_password_...

View solution in original post

tchimento_splun
Splunk Employee
Splunk Employee

You can start up Splunk with the --no-prompt flag and Splunk will be started up with no users. This way your Splunk deployment can continue to forward data and for security's sake, no one would be able to login. See the docs for a full explanation. http://docs.splunk.com/Documentation/Splunk/7.1.0/Security/Secureyouradminaccount#Create_a_password_...

Get Updates on the Splunk Community!

Splunk Classroom Chronicles: Training Tales and Testimonials (Episode 3)

Welcome back to Splunk Classroom Chronicles, our ongoing blog series that pulls back the curtain on Splunk ...

Operationalizing TDIR: Building a More Resilient, Scalable SOC

Optimizing SOC workflows with a unified, risk-based approach to Threat Detection, Investigation, and Response ...

Almost Too Eventful Assurance: Part 1

Modern IT and Network teams still struggle with too many alerts and isolating issues before they are notified. ...