Installation

Splunk admin user changes from version 7->8

gauravmsharma
Path Finder

Will upgarding my splunk installation from version 7 to 8 it seems like the default admin user name and default password does not exsist anymore. Below is the code which i use:

namecheck if password change is required
    command/opt/splunk/bin/splunk login -auth admin:changeme
    registerlogin_result
    ignore_errorstrue

  - namechange instance password
    command/opt/splunk/bin/splunk edit user admin -role admin -auth admin:changeme -password {{ admin_password }}
    whenlogin_result is succeeded
 
The code above while running gives an error 
"msg": "non-zero return code", "rc": 24, "start": "2020-09-03 13:06:30.914377", "stderr": "No users exist. Please set up a user.", "stderr_lines": ["No users exist. Please set up a user."]
 
Does anyone have faced the same issue?
Labels (1)
0 Karma
1 Solution

soutamo
SplunkTrust
SplunkTrust

That is documented change. You must add user and password before you start splunk or generate it when it starts first time.

In ansible it’s easy to create this user-seed.conf with ini_file module before you start splunk first time.

r. Ismo

View solution in original post

soutamo
SplunkTrust
SplunkTrust

That is documented change. You must add user and password before you start splunk or generate it when it starts first time.

In ansible it’s easy to create this user-seed.conf with ini_file module before you start splunk first time.

r. Ismo

View solution in original post

Register for .conf21 Now! Go Vegas or Go Virtual!

How will you .conf21? You decide! Go in-person in Las Vegas, 10/18-10/21, or go online with .conf21 Virtual, 10/19-10/20.