#Random
This is a place to discuss all things outside of Splunk, its products, and its use cases.

how to reset admin password in splunk 8?

3DGjos
Communicator

Hello, i'm trying to retrieve my lab's admin account but no success.

I tried the method of deleting the passwd file plus create user-seed.conf in system/local but didn't worked.

any ideas? Thanks!

0 Karma
1 Solution

woodcock
Esteemed Legend

The easiest way is to just to reset it by adding a user-seed.conf, deleting the existing entry in $SPLUNK_HOME/etc/passwd, then restarting splunk:
https://docs.splunk.com/Documentation/Splunk/latest/Admin/User-seedconf

View solution in original post

0 Karma

woodcock
Esteemed Legend

The easiest way is to just to reset it by adding a user-seed.conf, deleting the existing entry in $SPLUNK_HOME/etc/passwd, then restarting splunk:
https://docs.splunk.com/Documentation/Splunk/latest/Admin/User-seedconf

0 Karma

mdsnmss
SplunkTrust
SplunkTrust

Have you tried resetting the password hash? i haven't tested it in 8 but a good write-up on it is available here: https://www.hurricanelabs.com/splunk-tutorials/splunk-7-1-performing-a-splunk-password-reset

0 Karma

3DGjos
Communicator

Sorry for the delay in my answer, the link goes 404 😞

0 Karma

mdsnmss
SplunkTrust
SplunkTrust

Looks like the hyperlink added the period onto it and broke the link. I just removed the period from the link and it should work now.

0 Karma
*NEW* Splunk Love Promo!
Snag a $25 Visa Gift Card for Giving Your Review!

It's another Splunk Love Special! For a limited time, you can review one of our select Splunk products through Gartner Peer Insights and receive a $25 Visa gift card!

Review:





Or Learn More in Our Blog >>