#Random
This is a place to discuss all things outside of Splunk, its products, and its use cases.

how to reset admin password in splunk 8?

3DGjos
Communicator

Hello, i'm trying to retrieve my lab's admin account but no success.

I tried the method of deleting the passwd file plus create user-seed.conf in system/local but didn't worked.

any ideas? Thanks!

0 Karma
1 Solution

woodcock
Esteemed Legend

The easiest way is to just to reset it by adding a user-seed.conf, deleting the existing entry in $SPLUNK_HOME/etc/passwd, then restarting splunk:
https://docs.splunk.com/Documentation/Splunk/latest/Admin/User-seedconf

View solution in original post

0 Karma

woodcock
Esteemed Legend

The easiest way is to just to reset it by adding a user-seed.conf, deleting the existing entry in $SPLUNK_HOME/etc/passwd, then restarting splunk:
https://docs.splunk.com/Documentation/Splunk/latest/Admin/User-seedconf

0 Karma

mdsnmss
SplunkTrust
SplunkTrust

Have you tried resetting the password hash? i haven't tested it in 8 but a good write-up on it is available here: https://www.hurricanelabs.com/splunk-tutorials/splunk-7-1-performing-a-splunk-password-reset

0 Karma

3DGjos
Communicator

Sorry for the delay in my answer, the link goes 404 😞

0 Karma

mdsnmss
SplunkTrust
SplunkTrust

Looks like the hyperlink added the period onto it and broke the link. I just removed the period from the link and it should work now.

0 Karma
Get Updates on the Splunk Community!

Index This | I am a number, but when you add ‘G’ to me, I go away. What number am I?

March 2024 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with another ...

What’s New in Splunk App for PCI Compliance 5.3.1?

The Splunk App for PCI Compliance allows customers to extend the power of their existing Splunk solution with ...

Extending Observability Content to Splunk Cloud

Register to join us !   In this Extending Observability Content to Splunk Cloud Tech Talk, you'll see how to ...