Security

After launching an AWS instance for Splunk Enterprise AMI, what is the default username/password to access Splunk Web?

Engager

I've launched an AWS instance for the Splunk Enterprise AMI (https://aws.amazon.com/marketplace/pp/B00PUXWXNE ) with a public address. When I open http://pubic_address:8000/ on the browser, I cannot log in with user 'admin' and password 'changeme'. What are the default username/password to use?

0 Karma
1 Solution

Splunk Employee
Splunk Employee

I think the user name is still admin, but the password is the instance ID.

View solution in original post

Splunk Employee
Splunk Employee

As of version 7.2.5 the default password has been updated

username: admin
password: SPLUNK-$instance id$

https://docs.splunk.com/Documentation/Splunk/7.3.1/Admin/AbouttheSplunkAMI

Splunk Employee
Splunk Employee

I think the user name is still admin, but the password is the instance ID.

View solution in original post

Splunk Employee
Splunk Employee

please modify the answer : today the password is SPLUNK-{instanceID} as described in AWS marketplace, usage page

0 Karma

Path Finder

Usage Instructions


Get started with Splunk Web:

  • In your EC2 Management Console, find your instance running Splunk Enterprise.
  • Copy its public IP.
  • Paste the public IP into a new browser tab (do not hit enter yet).
  • Append :8000 to the end of the IP.
  • Hit enter.

  • Log into Splunk with the following credentials:

username: admin
password: {the instance id of the instance just created}

0 Karma

Path Finder

The link that you posted is 404'ing

0 Karma

Path Finder

Looks like you're just missing an 'E' at the end of the URL

0 Karma